Launchpad.net

CVE 2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book

See the CVE page on Mitre.org for more details.