What’s Vulnerable › Vulnerabilities

CVE-2003-0728

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-10-20 · updated 2026-06-16

Description

Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.

Affected products

Horde: through 2.2.4

References

Get alerted when CVE-2003-0728 or the next vulnerability affects your stack