Vulnerability record · CVE-2006-4255 · published 21 August 2006

CVE-2006-4255: Horde vulnerability

Horde · Horde

Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.

4.3 CVSS 2.0 Medium EPSS 1.7% · top 23.4%

4.3CVSS 2.0 base score

1.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

18References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Horde Horde

Imp Horde

References

Link	Tags
http://lists.horde.org/archives/announce/2006/000294.html
http://secunia.com/advisories/21533	Vendor Advisory
http://securityreason.com/securityalert/1423
http://securitytracker.com/id?1016713
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457
http://www.securityfocus.com/archive/1/443361/100/0/threaded
http://www.securityfocus.com/bid/19544
http://www.vupen.com/english/advisories/2006/3316
https://exchange.xforce.ibmcloud.com/vulnerabilities/28409
http://lists.horde.org/archives/announce/2006/000294.html
http://secunia.com/advisories/21533	Vendor Advisory
http://securityreason.com/securityalert/1423
http://securitytracker.com/id?1016713
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457
http://www.securityfocus.com/archive/1/443361/100/0/threaded
http://www.securityfocus.com/bid/19544
http://www.vupen.com/english/advisories/2006/3316
https://exchange.xforce.ibmcloud.com/vulnerabilities/28409

Track CVE-2006-4255 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-7218Horde groupware vulnerabilityUnspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-…EPSS 2.2%13 Sep 2009 10.0CVE-2005-3344Horde vulnerabilityThe default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.EPSS 8.0%16 Nov 2005 7.5CVE-2012-0209Horde open_calendar.js trojan enables remote PHP code executionHorde 3.3.12, Horde Groupware 1.2.10 and Groupware Webmail Edition 1.2.10 distributed via FTP between November 2011 and February 2012 contained an ex…EPSS 72%analysed25 Sep 2012 7.5CVE-2003-0025Horde imp vulnerabilityMultiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain …EPSS 28%17 Jan 2003 7.5CVE-2002-0181Horde vulnerabilityCross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal coo…EPSS 1.8%22 Apr 2002 7.5CVE-2001-1257Horde imp vulnerabilityCross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Java…EPSS 2.0%21 Jul 2001 6.8CVE-2007-1474Horde application framework vulnerabilityArgument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local user…EPSS 4.9%16 Mar 2007 6.8CVE-2006-2195Horde vulnerabilityCross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) temp…EPSS 2.2%15 Jun 2006

Source: NIST National Vulnerability Database (record CVE-2006-4255), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.