← Vulnerability feed

Vulnerability record · CVE-2010-3695 · published 31 March 2011

CVE-2010-3695: Horde imp cross-site scripting vulnerability

Horde · Imp

Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.

4.3 CVSS 2.0 Medium EPSS 5.0% · top 8.0% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
5.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
38References, 12 tagged exploit
16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0379.html Exploit
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598584 ExploitPatch
http://cvs.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h
http://git.horde.org/diff.php/groupware/docs/webmail/CHANGES?rt=horde&r1=1.35.2.11&r2=1.35.2.13&ty=h
http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11 Patch
http://lists.horde.org/archives/announce/2010/000558.html Patch
http://lists.horde.org/archives/announce/2010/000568.html
http://openwall.com/lists/oss-security/2010/09/30/7 ExploitPatch
http://openwall.com/lists/oss-security/2010/09/30/8 ExploitPatch
http://openwall.com/lists/oss-security/2010/10/01/6 Patch
http://secunia.com/advisories/41627 Vendor Advisory
http://secunia.com/advisories/43896 Vendor Advisory
http://securityreason.com/securityalert/8170
http://www.debian.org/security/2011/dsa-2204
http://www.securityfocus.com/archive/1/513992/100/0/threaded
http://www.securityfocus.com/bid/43515 Exploit
http://www.vupen.com/english/advisories/2010/2513 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0769 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=641069 ExploitPatch
http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0379.html Exploit
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598584 ExploitPatch
http://cvs.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h
http://git.horde.org/diff.php/groupware/docs/webmail/CHANGES?rt=horde&r1=1.35.2.11&r2=1.35.2.13&ty=h
http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11 Patch
http://lists.horde.org/archives/announce/2010/000558.html Patch
http://lists.horde.org/archives/announce/2010/000568.html
http://openwall.com/lists/oss-security/2010/09/30/7 ExploitPatch
http://openwall.com/lists/oss-security/2010/09/30/8 ExploitPatch
http://openwall.com/lists/oss-security/2010/10/01/6 Patch
http://secunia.com/advisories/41627 Vendor Advisory
http://secunia.com/advisories/43896 Vendor Advisory
http://securityreason.com/securityalert/8170
http://www.debian.org/security/2011/dsa-2204
http://www.securityfocus.com/archive/1/513992/100/0/threaded
http://www.securityfocus.com/bid/43515 Exploit
http://www.vupen.com/english/advisories/2010/2513 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0769 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=641069 ExploitPatch

Track CVE-2010-3695 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-7218Horde groupware vulnerabilityUnspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-…EPSS 2.2%10.0CVE-2008-7219Horde groupware permissions and access controls vulnerabilityHorde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 befo…EPSS 2.7%9.8CVE-2020-8518Horde Groupware Webmail CSV import PHP code injectionHorde Groupware Webmail Edition 5.2.22 permits injection of arbitrary PHP code through CSV data, resulting in remote code execution. The flaw is a co…EPSS 72%analysed8.8CVE-2013-6364Horde groupware cross-site scripting vulnerabilityHorde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address bookEPSS 2.1%8.8CVE-2019-12095Horde groupware cross-site scripting vulnerabilityHorde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags para…EPSS 1.1%8.8CVE-2019-9858Horde groupware path traversal vulnerabilityRemote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image…EPSS 19%8.8CVE-2017-7413Horde groupware os command injection vulnerabilityIn Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenti…EPSS 40%8.0CVE-2022-30287Horde Groupware Webmail reflection injection leads to PHP object deserializationHorde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack in which an attacker can instantiate a driver class, leading to a…EPSS 71%analysed

Source: NIST National Vulnerability Database (record CVE-2010-3695), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.