Back
CVE-2007-6018
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP…
Medium5.8EPSS 1.8%
- Published
- Updated
- Reserved
- Assigned by
- flexera
Description
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium5.8 | AV:N/AC:M/Au:N/C:P/I:P/A:N |
- EPSS (exploitation in 30 days)
- 1.8% · top 22% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.
Weakness
Affected products
n/a
- affected n/a
References (19)
- 29186 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=428625 (opens in a new tab)x_refsource_CONFIRMx_transferred
- SUSE-SR:2009:007 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- horde-impgroupware-filter-security-bypass(39595) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17&r2=1.17.2.1&ty=h (opens in a new tab)x_refsource_CONFIRMx_transferred
- [announce] 20080109 Horde Groupware 1.0.3 (final) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- [announce] 20080109 Horde 3.1.6 (final) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- 34418 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- FEDORA-2008-2087 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- 27223 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- [announce] 20080110 Horde Groupware Webmail Edition 1.0.4 (final) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1&ty=h (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://secunia.com/secunia_research/2007-102/advisory/ (opens in a new tab)x_refsource_MISCx_transferred
- 28020 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 29185 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 28546 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 29184 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- DSA-1470 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- FEDORA-2008-2040 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2007-6018)Record last updated .