CVE:CVE-2010-3693
CNNVD:CNNVD-201104-002
Horde Dynamic IMP（DIMP）1.1.5之前版本，及Horde Groupware Webmail Edition 1.2.7之前版本中存在跨站脚本攻击漏洞。远程攻击者可以借助与显示邮箱名称有关的向量，注入任意web脚本或者HTML。
solution:Upgrade horde groupware to a higher version than 1.2.6,1.0,1.0:rc1,1.0:rc2,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.1,1.1:rc1,1.1:rc2,1.1:rc3,1.1:rc4,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.2,1.2:rc1,1.2.1,1.2.2,1.2.3,1.2.3:rc1,1.2.4,1.2.5,and avoid the version (,1.2.6],1.0,1.0:rc1,1.0:rc2,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.1,1.1:rc1,1.1:rc2,1.1:rc3,1.1:rc4,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.2,1.2:rc1,1.2.1,1.2.2,1.2.3,1.2.3:rc1,1.2.4,1.2.5; Upgrade horde dynamic_imp to a higher version than 1.1.4,1.0,1.0:alpha,1.0:rc1,1.0:rc2,1.0:rc3,1.1,1.1:rc1,1.1:rc2,1.1.1,1.1.2,1.1.3,and avoid the version (,1.1.4],1.0,1.0:alpha,1.0:rc1,1.0:rc2,1.0:rc3,1.1,1.1:rc1,1.1:rc2,1.1.1,1.1.2,1.1.3