Debian Security Advisory 1642-1 - Will Drewry discovered that the Horde, allows remote attackers to send an email with a crafted MIME attachment filename attribute to perform cross site scripting.
86fa3fafadc64c5326f69589f6e81f393290a5626436c792773c3cc89611f794