Horde Groupware Webmail Edition — known CVE vulnerabilities

Every CVE whose affected-product data names Horde Groupware Webmail Edition, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2008-7219 — CVSS 10.0 (critical): Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and…
• CVE-2008-7218 — CVSS 10.0 (critical): Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2…
• CVE-2008-3650 — CVSS 9.0 (critical): Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related…
• CVE-2008-1284 — CVSS 6.0 (medium): Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with…
• CVE-2007-6018 — CVSS 5.8 (medium): IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP…
• CVE-2008-0807 — CVSS 4.9 (medium): lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde…
• CVE-2008-2783 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to…
• CVE-2008-1974 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5…
• CVE-2012-0791 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow…
• CVE-2012-0909 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject…