Vulnerability Details CVE-2001-1257
Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 77.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt
- http://www.debian.org/security/2001/dsa-073
- http://www.iss.net/security_center/static/6905.php
- http://www.securityfocus.com/bid/3082
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt
- http://www.debian.org/security/2001/dsa-073
- http://www.iss.net/security_center/static/6905.php
- http://www.securityfocus.com/bid/3082
Products affected by CVE-2001-1257
-
cpe:2.3:a:horde:imp:2.0
-
cpe:2.3:a:horde:imp:2.2
-
cpe:2.3:a:horde:imp:2.2.1
-
cpe:2.3:a:horde:imp:2.2.2
-
cpe:2.3:a:horde:imp:2.2.3
-
cpe:2.3:a:horde:imp:2.2.4
-
cpe:2.3:a:horde:imp:2.2.5