Test ID:	1.3.6.1.4.1.25623.1.0.15605
Category:	Web application abuses
Title:	Horde < 2.2.7 Help Subsystem XSS Vulnerability - Active Check
Summary:	Horde is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: Horde is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The help subsystem is vulnerable to a cross-site scripting attack since information passed to the help window is not properly sanitized. Solution: Update to version 2.2.7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2741 BugTraq ID: 11546 http://www.securityfocus.com/bid/11546 http://lists.horde.org/archives/announce/2004/000107.html http://www.osvdb.org/11164 http://securitytracker.com/id?1011959 http://secunia.com/advisories/12992 XForce ISS Database: horde-help-window-xss(17881) https://exchange.xforce.ibmcloud.com/vulnerabilities/17881
Copyright	Copyright (C) 2004 George A. Theall

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.