Horde Webmail – XSS and CSRF to SQLi, RCE, Stealing Emails
bugs.horde.org