CVE-2012-0209: Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP bet...

Security readout for executives and security teams

This CVE describes a supply-chain backdoor in specific Horde downloads from late 2011 to early 2012. A tampered JavaScript template could let a remote attacker run PHP code on the webmail server. Exposure depends on whether an organization installed those FTP-distributed builds. Most exposure is legacy. Organizations are mainly at risk if they still operate old Horde deployments, retained images, or backups installed from affected FTP packages from November 2011 through February 2012. Prioritize as critical only where old Horde systems or inherited server images may exist. The business risk is full server compromise, but scope is limited to specific legacy FTP-distributed builds. Mitigation focus: Inventory Horde and Horde Groupware installations and archived server images.; Identify installs sourced from FTP downloads between November 2011 and February 2012.; Follow Horde advisory guidance for verification and replacement procedures..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.