CVE-2004-0584

Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a security fix, does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability.

Affected Software

Name	Vendor	Start Version	End Version
Imp	Horde	2.0 (including)	2.0 (including)
Imp	Horde	2.2 (including)	2.2 (including)
Imp	Horde	2.2.1 (including)	2.2.1 (including)
Imp	Horde	2.2.2 (including)	2.2.2 (including)
Imp	Horde	2.2.3 (including)	2.2.3 (including)
Imp	Horde	2.2.4 (including)	2.2.4 (including)
Imp	Horde	2.2.5 (including)	2.2.5 (including)
Imp	Horde	2.2.6 (including)	2.2.6 (including)
Imp	Horde	2.2.7 (including)	2.2.7 (including)
Imp	Horde	2.2.8 (including)	2.2.8 (including)
Imp	Horde	2.3 (including)	2.3 (including)
Imp	Horde	3.0 (including)	3.0 (including)
Imp	Horde	3.1 (including)	3.1 (including)
Imp	Horde	3.1.2 (including)	3.1.2 (including)
Imp	Horde	3.2 (including)	3.2 (including)
Imp	Horde	3.2.1 (including)	3.2.1 (including)
Imp	Horde	3.2.2 (including)	3.2.2 (including)
Imp	Horde	3.2.3 (including)	3.2.3 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0584
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References