CVE-2010-1638: Horde

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a crafted request to an unspecified test script. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.

Affected products

• Horde Horde: any version

Published 2010-06-22. Last modified 2026-06-16.