CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. It may be remotely exploitable.
CVE
CVE-2007-6018
Severity
MEDIUM
CVSS
5.8
EPSS
1.77%
Original NVD Description
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.