The Horde Framework and Horde IMP systems are susceptible to cross site scripting attacks in search.php. Flaws are verified in Horde versions 3.0.4 through 3.1.2 and IMP versions prior to 4.1.3.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49342/hordeXSS-2.txt
Source: https://packetstormsecurity.com/files/49342/hordeXSS-2.txt.html