---
title: "CVE-2005-4189\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2005-4189?format=md
keywords: index, follow
---

# CVE-2005-4189

Publication date 13 December 2005

Last updated 17 July 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3
before 2.0.6 allow remote authenticated users to inject arbitrary web
script or HTML via (1) the Calendar name field when creating calendars, (2)
event title field when deleting events, the (3) Category and (4) Location
search fields, and the (5) attendees email address fields when editing
event attendees, and possibly other vectors.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| kronolith2 | 7.04 feisty | Fixed 2.0.6-1 |
| 6.10 edgy | Fixed 2.0.6-1 |
| 6.06 LTS dapper | Fixed 2.0.6-1 |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4189)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-4189)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-4189)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2005-4189)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2005-4189>