Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-7187 State: PUBLISHED Published: 2009-09-09T17:00:00 Last Updated: 2024-08-07T11:56:14.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-66.html - http://www.securityfocus.com/archive/1/487351/100/200/threaded - http://www.securitytracker.com/id?1019285 - http://www.vupen.com/english/advisories/2008/0367
CVE ID: CVE-2008-7188 State: PUBLISHED Published: 2009-09-09T17:00:00 Last Updated: 2024-08-07T11:56:14.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address in the email parameter to recoverpass.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39494 - http://www.securityfocus.com/
ecunia.com/advisories/28313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39494 - http://www.securityfocus.com/bid/27148 - https://www.exploit-db.com/exploits/4837
CVE ID: CVE-2008-7189 State: PUBLISHED Published: 2009-09-09T17:00:00Z Last Updated: 2024-09-16T22:51:56.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Local Media Browser before 0.1 have unknown impact and attack vectors related to "Security holes." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40529 - http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html - http://freshmeat.net/projects/localmediabrowser/releases/269578
CVE ID: CVE-2008-7190 State: PUBLISHED Published: 2009-09-09T17:00:00Z Last Updated: 2024-09-16T18:23:21.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possibly cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41802 - http://trac.adium.im/wiki/PreviousVersionHistory
CVE ID: CVE-2008-7191 State: PUBLISHED Published: 2009-09-09T17:00:00Z Last Updated: 2024-09-16T16:48:11.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Polipo before 1.0.4 allows remote attackers to cause a denial of service (crash) via a long request URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text - http://osvdb.org/39912
CVE ID: CVE-2008-7192 State: PUBLISHED Published: 2009-09-09T19:00:00 Last Updated: 2024-08-07T11:56:14.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39990 - http://www.securityfocus.com/archive/1/487139/100/200/threaded
CVE ID: CVE-2008-7193 State: PUBLISHED Published: 2009-09-09T19:00:00 Last Updated: 2024-08-07T11:56:14.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40033 - http://www.securityfocus.com/archive/1/487249/100/200/thread
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/40033 - http://www.securityfocus.com/archive/1/487249/100/200/threaded - http://osvdb.org/50998
CVE ID: CVE-2008-7194 State: PUBLISHED Published: 2009-09-10T10:00:00 Last Updated: 2024-08-07T11:56:14.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28606 - http://www.securityfocus.com/bid/27391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39847 - http://www.vupen.com/english/advisories/2008/0233 - http://www.fujitsu.com/global/support/software/security/products
7 - http://www.vupen.com/english/advisories/2008/0233 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html
CVE ID: CVE-2008-7195 State: PUBLISHED Published: 2009-09-10T10:00:00 Last Updated: 2024-08-07T11:56:14.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39848 - http://www.securityfocus.com/bid/27391 - http://www.vupen.com/english/advisories/2008/0233 - http://www.fujitsu.com/global/support/software/securi
om/bid/27391 - http://www.vupen.com/english/advisories/2008/0233 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html
CVE ID: CVE-2008-7196 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-16T23:41:53.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution security flaw," possibly an untrusted search path vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40573 - http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html
CVE ID: CVE-2008-7197 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-17T04:04:03.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html - http://osvdb.org/40528
CVE ID: CVE-2008-7198 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-16T23:31:16.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40571 - http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0029.html
CVE ID: CVE-2008-7199 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-16T21:07:48.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrated by a Nessus scan or (2) malformed input to TCP port 502. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0268.html - http://osvdb.org/51002
CVE ID: CVE-2008-7200 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-16T18:44:51.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48898 - http://cvs.schmorp.de/cf.schmorp.de/server/Changes
CVE ID: CVE-2008-7201 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-16T19:46:59.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as demonstrated using (1) Nessus and (2) nmap. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0487.html - http://osvdb.org/51003
CVE ID: CVE-2008-7202 State: PUBLISHED Published: 2009-09-10T10:00:00Z Last Updated: 2024-09-17T04:25:33.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html - http://freshmeat.net/projects/openwebmail/releases/270453 - http://osvdb.org/40581
CVE ID: CVE-2008-7203 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4856 - http://www.securityfocus.com/bid/27159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39535
CVE ID: CVE-2008-7204 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40117 - http://virtuemart.net/index.php?option=com_content&task=view&id=276&Itemid=127 - http://secunia.com/advisories/28722 - http://osvdb.org/41762
CVE ID: CVE-2008-7205 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41761 - http://virtuemart.net/index.php?option=com_content&task=view&id=275&Itemid=127 - http://www.securityfocus.com/bid/27532 - http://secunia.com/advisories/28722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40114
CVE ID: CVE-2008-7206 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://midas.psi.ch/elog/download/ChangeLog - http://osvdb.org/41685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40124 - http://www.securityfocus.com/bid/27526
CVE ID: CVE-2008-7207 State: PUBLISHED Published: 2009-09-11T16:00:00Z Last Updated: 2024-09-17T01:47:03.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip - http://osvdb.org/42433
CVE ID: CVE-2008-7208 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/index_26.htm - http://www.securityfocus.com/archive/1/485837/100/200/threaded - http://sourceforge.net/forum/forum.php?forum_id=774946 - http://osvdb.org/51057 - http://www.vupen.com/english/advisories/2008
/sourceforge.net/forum/forum.php?forum_id=774946 - http://osvdb.org/51057 - http://www.vupen.com/english/advisories/2008/0081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39482 - http://www.securityfocus.com/archive/1/487136/100/200/threaded - http://www.securityfocus.com/bid/27158 - https://www.exploit-db.com/exploits/4857 - http://osvdb.org/51058
CVE ID: CVE-2008-7209 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/index_26.htm - http://www.securityfocus.com/archive/1/485837/100/200/threaded - http://sourceforge.net/f
ww.bugreport.ir/index_26.htm - http://www.securityfocus.com/archive/1/485837/100/200/threaded - http://sourceforge.net/forum/forum.php?forum_id=774946 - http://www.vupen.com/english/advisories/2008/0081 - http://www.securityfocus.com/archive/1/487136/100/200/threaded - http://osvdb.org/51117 - http://www.securityfocus.com/bid/27158 - https://www.exploit-db.com/exploits/4857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39485
CVE ID: CVE-2008-7210 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter's hash value, which prevents the associated $_GET["s"] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat. Additional Analyst Notes: - CVE Program Container: References:
this should not be treated as a vulnerability in AJChat. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39600 - http://www.securityfocus.com/bid/27241
CVE ID: CVE-2008-7211 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade access to the Physical Device Object (PDO), which allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485848/100/200/threaded - http://www.reversemode.com/index.php
ner: References: - http://www.securityfocus.com/archive/1/485848/100/200/threaded - http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=54 - http://www.securityfocus.com/bid/27179
CVE ID: CVE-2008-7212 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39983 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html - http://s
.xforce.ibmcloud.com/vulnerabilities/39983 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html - http://secunia.com/advisories/28670 - http://forum.mambo-foundation.org/showthread.php?t=10158 - http://www.securityfocus.com/archive/1/487128/100/200/threaded - http://www.bugreport.ir/index_33.htm - http://osvdb.org/42529
CVE ID: CVE-2008-7213 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42530 - http://www.vupen.com/english/advisories/2008/0325 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html - https://exchange.xforce.ibmcloud.com/vulnerab
/0325 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39984 - http://www.securityfocus.com/bid/27470 - http://secunia.com/advisories/28670 - http://forum.mambo-foundation.org/showthread.php?t=10158 - http://www.securityfocus.com/archive/1/487128/100/200/threaded - http://www.bugreport.ir/index_33.htm
CVE ID: CVE-2008-7214 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/ad
tors/php/connector.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39985 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html - http://osvdb.org/42531 - http://secunia.com/advisories/28670 - http://forum.mambo-foundation.org/showthread.php?t=10158 - http://www.securityfocus.com/archive/1/487128/100/200/threaded - http://www.bugreport.ir/index_33.htm
CVE ID: CVE-2008-7215 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0325 - http://archives.neohapsi
tes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0325 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html - http://osvdb.org/42532 - http://secunia.com/advisories/28670 - http://forum.mambo-foundation.org/showthread.php?t=10158 - http://www.securityfocus.com/archive/1/487128/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39986 - http://www.bugreport.ir/index_33.htm - http://www.securityfocus.com/bid/27472
CVE ID: CVE-2008-7216 State: PUBLISHED Published: 2009-09-11T16:00:00 Last Updated: 2024-08-07T11:56:14.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39688 - http://www.securityfocus.com/bid/27287 - http://www.securityfocus.com/archive/1/486331/100/200/threaded - http://docs.google.com/View?docid=df36
.com/bid/27287 - http://www.securityfocus.com/archive/1/486331/100/200/threaded - http://docs.google.com/View?docid=df36cd52_19xzmkwqcg
CVE ID: CVE-2008-7217 State: PUBLISHED Published: 2009-09-13T22:00:00Z Last Updated: 2024-09-16T22:09:46.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488 - http://osvdb.org/44959
CVE ID: CVE-2008-7218 State: PUBLISHED Published: 2009-09-13T22:00:00 Last Updated: 2024-08-07T11:56:14.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: Refere
and 1.1 before 1.1-RC2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2008/000371.html - http://lists.horde.org/archives/announce/2008/000369.html - http://lists.horde.org/archives/announce/2008/000363.html - http://www.securityfocus.com/bid/27217 - http://lists.horde.org/archives/announce/2008/000365.html - http://lists.horde.org/archives/announce/2008/000376.html - http://lists.horde.org/archives/announce/2008/000367.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html - http://lists.horde.org/archives/announce/2008/000360.html - http://lists.horde.org/archi