← Database

CVE-2001-1257

HIGH CVSS: 7.5 Published: 2001-07-21 Modified: 2026-06-16

Description

Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.

Affected Platforms

Horde Imp

Weakness Type

NVD-CWE-Other

References