The Horde Framework and Horde IMP systems are susceptible to cross site scripting attacks in index.php. Flaws are verified in Horde versions 3.0.4 through 3.1.2 and IMP versions prior to 4.1.3.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49341/hordeXSS.txt
Source: https://packetstormsecurity.com/files/49341/hordeXSS.txt.html