Launchpad.net

CVE 2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions

See the CVE page on Mitre.org for more details.