[Bug 965573] VUL-0: CVE-2015-8807, CVE-2016-2228: Horde: Two cross-site scripting vulnerabilities