Horde vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20252
3. 20263

Newest CVEs

• CVE-2026-65053

  Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name

  horde · imp

  Medium5.1
• CVE-2026-60102

  Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver

  horde · Vfs

  High7.7
• CVE-2026-58451

  Horde IMP < 7.0.1 Path Traversal via Compose.php img src

  horde · imp

  High7.1
• CVE-2025-41066

  Disclosure of sensitive information in Horde Groupware

  Horde · Groupware

  Medium6.9
• CVE-2025-30349

  Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail…

  Horde · IMP

  High7.2
• CVE-2020-8866

  This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is…

  Horde · Groupware Webmail Edition

  Medium4.3
• CVE-2020-8865

  This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is…

  Horde · Groupware Webmail Edition

  Medium6.3