CVE-2001-1257

Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.

View graph Watch Export

CVSS v3.1

—

EPSS

1.97%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

1 relationships

imp

source

Timeline

disclosure → media coverage

Jul 21, 2001

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026