CVE-2000-0911: Horde Imp

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.

Affected products

• Horde Imp: version 2.0 only; version 2.2 only

Published 2000-12-19. Last modified 2026-09-23.