Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Email

Roundcube

Roundcube - Free webmail for the masses. Roundcube webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client including MIME support address book folder manipulation message searching and spell checking.

Official Site:

https://roundcube.net/

Severity Summary:

Critical: 6 High: 16 Medium: 47 Low: 5
Reference
Title
Severity
CVE-2015-1433
Roundcube Cross-site Scripting (XSS) Vulnerability
Medium
CVE-2009-4077
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2010-0464
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2011-1492
Roundcube Improper Input Validation Vulnerability
Medium
CVE-2011-2937
Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-4078
Roundcube Resource Management Errors Vulnerability
Medium
CVE-2012-3508
Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-4668
Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2009-4076
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2011-1491
Roundcube Improper Input Validation Vulnerability
Low
CVE-2012-1253
Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2012-3507
Roundcube Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2026-35538
Roundcube Improper Neutralization of Argument Delimiters in a Command (Argument Injection) Vulnerability
Low
CVE-2015-8105
Roundcube Cross-site Scripting (XSS) Vulnerability
Low