CVE-2004-0584: Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate i...

Security readout for executives and security teams

CVE-2004-0584 describes an input-validation flaw in Horde IMP webmail 3.2.3 and earlier. A malicious email containing script or HTML could run script in another user’s browser when viewed through IMP. Business impact depends on whether legacy IMP is still present. Exposure is likely limited to organizations still running Horde IMP 3.2.3 or earlier, including historical Gentoo-packaged deployments. The source bundle does not identify other affected products or versions. Treat this as a legacy webmail risk. It is not KEV-listed, but any remaining IMP 3.2.3-or-earlier deployment should be remediated because webmail XSS can expose user sessions and sensitive mail. Mitigation focus: Identify any Horde IMP 3.2.3 or earlier deployments.; Review Horde and Gentoo advisory guidance for the referenced security fix.; Apply the vendor-provided fix or supported package update where available..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.