Filtered by vendor Horde Subscriptions
Filtered by product Imp Subscriptions
Total 21 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-4080 1 Horde 1 Imp 2025-04-03 N/A
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters.