Hi, we are using a heavily customised version of Horde 3.1.4 and IMP 4.1.4. Are these versions affected by the recently discovered xss vulnerability? Is a proof of concept email available? I want to test if our Horde-installation is vulnerable too. Patches are welcome =) Torsten Homberger