CVE-2006-5449: Horde Ingo h3

Medium severity, CVSS 6.5. EPSS: 4.1% chance of exploitation in the next 30 days.

procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule.

Affected products

• Horde Ingo h3: up to and including 1.1.1

Published 2006-10-23. Last modified 2026-06-16.