CVE-2001-1258: Horde Imp

Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.

Affected products

• Horde Imp: version 2.0 only; version 2.2 only; version 2.2.1 only; version 2.2.2 only; version 2.2.3 only; version 2.2.4 only; …

Published 2001-07-21. Last modified 2026-06-16.