VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 5, 2014· Updated Jun 16, 2026

CVE-2012-6640

CVE-2012-6640

Description

Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

39
  • Horde (software)/Groupware11 versions
    cpe:2.3:a:horde:groupware:4.0.1:*:webamail:*:*:*:*:*+ 10 more
    • cpe:2.3:a:horde:groupware:4.0.1:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0.2:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0.3:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0.4:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0.5:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0.6:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0.7:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0:rc1:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0:rc2:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:4.0:*:webamail:*:*:*:*:*
    • cpe:2.3:a:horde:groupware:*:*:webamail:*:*:*:*:*range: <=4.0.8
  • Horde (software)/Imp27 versions
    cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*+ 26 more
    • cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*range: <=5.0.21
    • cpe:2.3:a:horde:imp:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.14:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.15:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.16:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.17:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.18:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.19:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.20:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:horde:imp:5.0:rc2:*:*:*:*:*:*
    • (no CPE)range: <5.0.22
  • Horde (software)/Groupware Webmail Editionllm-fuzzy
    Range: <4.0.9

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.