Security Advisory
CVE-2003-0728
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.