| Package | Affected versions | Patched versions |
|---|---|---|
| horde | = 1.2.7 | |
| imp | = 2.2.8 |
Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free