Debian/roundcube: unknown

Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via

Action: Upgrade roundcube to 0.1~rc2-6 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-6321#Debian:14/roundcube
• https://security-tracker.debian.org/tracker/CVE-2007-6321

published 2007-12-12T01:46:00Z · modified 2026-10-21T17:47:42.631022545Z · JSON