CVE-2009-0931 (horde, horde_groupware)
Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0931
