Horde IMP

• CVE-2026-65053 Medium 6.1 Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name 0.4%
• CVE-2026-58451 Medium 6.5 Horde IMP < 7.0.1 Path Traversal via Compose.php img src 0.6%
• CVE-2025-30349 High 7.2 Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may 31.3%