Horde IMP status.php3 XSS

Summary
The remote host is running at least one instance of Horde IMP in which the status.php3 script is vulnerable to a cross site scripting attack since information passed to it is not properly sanitized.
Solution
Upgrade to IMP version 2.2.8 or later.