[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5B5ToYbPvpUk0Qsifx0dbMvAV9U_9GS7asvGkGjbQCQ":3,"g5a-ex:horde\u002Fgroupware_webmail_edition@*":196,"g5a-family:horde\u002Fgroupware_webmail_edition":198},{"success":4,"data":5},true,{"product":6,"versions":85,"topVulnerabilitiesByEpss":118,"kevVulnerabilities":173,"seoMetadata":174,"meta":193},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":84},"horde","groupware_webmail_edition",32,10,0,"2012-01-24",[14,18,21,23,26,29,31,33,35,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",5,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.0.1",3,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.2",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"1.0.3",6,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"1.0.4",4,{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"1.0.5",{"version":32,"cve_count":28,"kev_count":11,"has_kev":17},"1.0.6",{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},"1.0.7",{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"1.0.8",2,{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},"1.1",{"version":41,"cve_count":37,"kev_count":11,"has_kev":17},"1.1.1",{"version":43,"cve_count":37,"kev_count":11,"has_kev":17},"1.1.2",{"version":45,"cve_count":37,"kev_count":11,"has_kev":17},"1.1.3",{"version":47,"cve_count":37,"kev_count":11,"has_kev":17},"1.1.4",{"version":49,"cve_count":37,"kev_count":11,"has_kev":17},"1.1.5",{"version":51,"cve_count":37,"kev_count":11,"has_kev":17},"1.1.6",{"version":53,"cve_count":37,"kev_count":11,"has_kev":17},"1.2",{"version":55,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.1",{"version":57,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.10",{"version":59,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.2",{"version":61,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.3",{"version":63,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.4",{"version":65,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.5",{"version":67,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.6",{"version":69,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.7",{"version":71,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.8",{"version":73,"cve_count":37,"kev_count":11,"has_kev":17},"1.2.9",{"version":75,"cve_count":37,"kev_count":11,"has_kev":17},"4.0",{"version":77,"cve_count":37,"kev_count":11,"has_kev":17},"4.0.1",{"version":79,"cve_count":37,"kev_count":11,"has_kev":17},"4.0.2",{"version":81,"cve_count":37,"kev_count":11,"has_kev":17},"4.0.3",{"version":83,"cve_count":37,"kev_count":11,"has_kev":17},"4.0.4","Groupware Webmail Edition by Horde is a technology product with 32 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":28,"kev_count":11,"has_kev":17},{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},{"version":41,"cve_count":37,"kev_count":11,"has_kev":17},{"version":43,"cve_count":37,"kev_count":11,"has_kev":17},{"version":45,"cve_count":37,"kev_count":11,"has_kev":17},{"version":47,"cve_count":37,"kev_count":11,"has_kev":17},{"version":49,"cve_count":37,"kev_count":11,"has_kev":17},{"version":51,"cve_count":37,"kev_count":11,"has_kev":17},{"version":53,"cve_count":37,"kev_count":11,"has_kev":17},{"version":55,"cve_count":37,"kev_count":11,"has_kev":17},{"version":57,"cve_count":37,"kev_count":11,"has_kev":17},{"version":59,"cve_count":37,"kev_count":11,"has_kev":17},{"version":61,"cve_count":37,"kev_count":11,"has_kev":17},{"version":63,"cve_count":37,"kev_count":11,"has_kev":17},{"version":65,"cve_count":37,"kev_count":11,"has_kev":17},{"version":67,"cve_count":37,"kev_count":11,"has_kev":17},{"version":69,"cve_count":37,"kev_count":11,"has_kev":17},{"version":71,"cve_count":37,"kev_count":11,"has_kev":17},{"version":73,"cve_count":37,"kev_count":11,"has_kev":17},{"version":75,"cve_count":37,"kev_count":11,"has_kev":17},{"version":77,"cve_count":37,"kev_count":11,"has_kev":17},{"version":79,"cve_count":37,"kev_count":11,"has_kev":17},{"version":81,"cve_count":37,"kev_count":11,"has_kev":17},{"version":83,"cve_count":37,"kev_count":11,"has_kev":17},[119,127,133,137,141,145,151,156,161,167],{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":126},"CVE-2008-1974","Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter.","2008-04-27",4.3,"v2","Medium",0.04883,{"cveId":128,"description":129,"publishedDate":130,"cvssScore":10,"cvssVersion":124,"severity":131,"isKev":17,"epssScore":132},"CVE-2008-7219","Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.","2009-09-13","Critical",0.02744,{"cveId":134,"description":135,"publishedDate":12,"cvssScore":123,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":136},"CVE-2012-0791","Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names.  NOTE: some of these details are obtained from third party information.",0.02348,{"cveId":138,"description":139,"publishedDate":130,"cvssScore":10,"cvssVersion":124,"severity":131,"isKev":17,"epssScore":140},"CVE-2008-7218","Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors.",0.02202,{"cveId":142,"description":143,"publishedDate":12,"cvssScore":123,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":144},"CVE-2012-0909","Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification.  NOTE: Some of these details are obtained from third party information.",0.01781,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":150},"CVE-2007-6018","IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) \"purge\" deleted emails via a crafted email message.","2008-01-11",5.8,0.01774,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":25,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":155},"CVE-2008-1284","Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via \"..\" sequences and a null byte in the theme name.","2008-03-11",0.01677,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":123,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":160},"CVE-2008-2783","Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php, (2) workweek.php, and (3) day.php; and (4) the horde parameter in the PATH_INFO to the default URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","2008-06-19",0.01505,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":165,"cvssVersion":124,"severity":125,"isKev":17,"epssScore":166},"CVE-2008-0807","lib\u002FDriver\u002Fsql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify address data via a modified object_id parameter to edit.php, as demonstrated by modifying a personal address book entry when there is write access to a shared address book.","2008-02-19",4.9,0.01383,{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"cvssVersion":124,"severity":131,"isKev":17,"epssScore":172},"CVE-2008-3650","Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to \"unescaped output,\" possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.","2008-08-13",9,0.0102,[],{"title":175,"metaDescription":176,"keywords":177,"structuredData":178},"Groupware Webmail Edition by Horde - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Groupware Webmail Edition by Horde covering 32 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Groupware Webmail Edition vulnerabilities, Groupware Webmail Edition security, Groupware Webmail Edition CVE, Horde Groupware Webmail Edition, Groupware Webmail Edition threat intelligence, Horde security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":179,"@type":180,"name":181,"description":176,"url":182,"manufacturer":183,"applicationCategory":187,"softwareVersion":188,"mainEntity":189},"https:\u002F\u002Fschema.org","SoftwareApplication","Groupware Webmail Edition","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fhorde\u002Fgroupware_webmail_edition",{"@type":184,"name":185,"url":186},"Organization","Horde","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fhorde","Security Software","32 versions tracked",{"@type":190,"name":191,"description":192,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Groupware Webmail Edition Security Vulnerabilities","Security vulnerabilities affecting Groupware Webmail Edition by Horde",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":194,"apiVersion":195},"2026-10-18T23:47:14.362Z","3.0",{"rows":197,"total":11,"capped":17,"failed":11},[],[]]