IMP vulnerabilities

1 known vulnerability in IMP from Horde. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  IMP: Improper Neutralization of Input During Web Page Generation

  CVE-2025-30349Mar 21, 2025HordeEPSS 31.3%

  Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in the wil