Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2007-6018

IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.

  • Published: Jan 11, 2008
  • Updated: Nov 9, 2025
  • CVE: CVE-2007-6018
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
horde / horde 3.1.5 3.1.5.x
horde / framework 3.1.5 3.1.5.x
horde / groupware_webmail_edition 1.0.3 1.0.3.x
horde / imp 4.1.5 4.1.5.x