[Bug 965573] VUL-0: CVE-2015-8807, CVE-2016-2228: horde5: Two cross-site scripting vulnerabilities