Filtered by vendor Roundcube
Subscribe
Total
62 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-1253 | 1 Roundcube | 1 Webmail | 2012-06-27 | 2.6 LOW | N/A |
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment. | |||||
CVE-2011-2937 | 1 Roundcube | 1 Webmail | 2012-02-03 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI. |