squirrelmail vulnerabilities (Red Hat)

33 vulnerabilities.

• squirrelmail Red Hat functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5,... CVE-2012-2124 Fix available 5.0 MediumJanuary 18, 2013
• squirrelmail Red Hat Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier... CVE-2011-2753 6.8 MediumJuly 17, 2011
• squirrelmail Red Hat CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify... CVE-2011-2752 5.8 MediumJuly 17, 2011
• squirrelmail Red Hat Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22... CVE-2011-2023 4.3 MediumJuly 14, 2011
• squirrelmail Red Hat Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow... CVE-2010-4555 4.3 MediumJuly 14, 2011
• squirrelmail Red Hat functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering... CVE-2010-4554 4.3 MediumJuly 14, 2011
• squirrelmail Red Hat functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit... CVE-2010-2813 5.0 MediumAugust 12, 2010
• squirrelmail Red Hat The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to... CVE-2010-1637 6.5 MediumJune 22, 2010
• squirrelmail Red Hat Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier,... CVE-2009-2964 Fix available 6.8 MediumAugust 25, 2009
• squirrelmail Red Hat functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from... CVE-2009-1581 4.3 MediumMay 14, 2009
• squirrelmail Red Hat Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack... CVE-2009-1580 5.8 MediumMay 14, 2009
• squirrelmail Red Hat The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail... CVE-2009-1579 6.8 MediumMay 14, 2009
• squirrelmail Red Hat Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail... CVE-2009-1578 4.3 MediumMay 14, 2009
• squirrelmail Red Hat A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all... CVE-2009-0030 6.5 MediumJanuary 21, 2009
• squirrelmail Red Hat Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to... CVE-2008-2379 Fix available 4.3 MediumDecember 5, 2008
• squirrelmail Red Hat Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session,... CVE-2008-3663 5.0 MediumSeptember 24, 2008
• squirrelmail Red Hat Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4... CVE-2007-2589 5.0 MediumMay 11, 2007
• squirrelmail Red Hat Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0... CVE-2007-1262 4.3 MediumMay 11, 2007
• squirrelmail Red Hat Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow... CVE-2006-6142 Fix available 6.8 MediumDecember 5, 2006
• squirrelmail Red Hat Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows... CVE-2006-4019 Public exploitFix available 6.4 MediumAugust 11, 2006
• squirrelmail Red Hat ** DISPUTED ** PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1... CVE-2006-2842 Public exploitFix availableDisputed EPSS 47.2% 7.5 HighJune 6, 2006
• squirrelmail Red Hat CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject... CVE-2006-0377 5.0 MediumFebruary 24, 2006
• squirrelmail Red Hat Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote... CVE-2006-0195 4.3 MediumFebruary 24, 2006
• squirrelmail Red Hat webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages... CVE-2006-0188 4.3 MediumFebruary 24, 2006
• squirrelmail Red Hat options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the... CVE-2005-2095 Public exploit 4.3 MediumJuly 13, 2005
• squirrelmail Red Hat Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow... CVE-2005-1769 4.3 MediumJune 16, 2005
• squirrelmail Red Hat Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows... CVE-2005-0104 4.3 MediumJanuary 29, 2005
• squirrelmail Red Hat prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to... CVE-2005-0075 5.0 MediumJanuary 29, 2005
• squirrelmail Red Hat PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote... CVE-2005-0103 7.5 HighJanuary 24, 2005
• squirrelmail Red Hat Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in... CVE-2004-1036 Fix available 6.8 MediumNovember 16, 2004
• squirrelmail Red Hat SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute... CVE-2004-0521 10.0 HighJune 3, 2004
• squirrelmail Red Hat Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote... CVE-2004-0520 Public exploit 6.8 MediumJune 3, 2004
• squirrelmail Red Hat Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers... CVE-2004-0519 Public exploit EPSS 22.5% 6.8 MediumJune 3, 2004