Horde IMP vulnerabilities

3 published CVEs name Horde IMP among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20251
20262

Newest CVEs

CVE-2026-65053
Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name
horde · imp
Medium5.1
CVE-2026-58451
Horde IMP < 7.0.1 Path Traversal via Compose.php img src
horde · imp
High7.1
CVE-2025-30349
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail…
Horde · IMP
High7.2

Most common weaknesses