Squirrelmail vulnerabilities

Products

• Squirrelmail 66
• Gpg Plugin 7

Newest

• squirrelmail mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows... CVE-2025-30090 7.2 HighApril 2, 2025
• squirrelmail compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates... CVE-2020-14932 9.8 CriticalJune 20, 2020
• squirrelmail compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates... CVE-2020-14933 Disputed 8.8 HighJune 20, 2020
• squirrelmail, squirrelmail change passwd +1 more Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords. CVE-2012-5623 7.5 HighFebruary 13, 2020
• squirrelmail XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper... CVE-2019-12970 Fix available 6.1 MediumJuly 1, 2019
• squirrelmail The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate... CVE-2018-14955 Fix available 6.1 MediumAugust 5, 2018
• squirrelmail The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute. CVE-2018-14954 Fix available 6.1 MediumAugust 5, 2018
• squirrelmail The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href="... CVE-2018-14953 Fix available 6.1 MediumAugust 5, 2018
• squirrelmail The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink... CVE-2018-14952 Fix available 6.1 MediumAugust 5, 2018
• squirrelmail The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data... CVE-2018-14951 Fix available 6.1 MediumAugust 5, 2018
• squirrelmail The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href="... CVE-2018-14950 Fix available 6.1 MediumAugust 5, 2018
• squirrelmail, debian linux +1 more A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate ... CVE-2018-8741 Fix available 8.8 HighMarch 17, 2018
• squirrelmail SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication... CVE-2017-7692 Public exploitFix available EPSS 32.2% 8.8 HighApril 20, 2017
• redhat enterprise linux, squirrelmail +1 more functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5,... CVE-2012-2124 Fix available 5.0 MediumJanuary 18, 2013
• squirrelmail Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier... CVE-2011-2753 Fix available 6.8 MediumJuly 17, 2011
• squirrelmail CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify... CVE-2011-2752 Fix available 5.8 MediumJuly 17, 2011
• squirrelmail Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22... CVE-2011-2023 Fix available 4.3 MediumJuly 14, 2011
• squirrelmail Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow... CVE-2010-4555 Fix available 4.3 MediumJuly 14, 2011
• squirrelmail functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering... CVE-2010-4554 Fix available 4.3 MediumJuly 14, 2011
• squirrelmail functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit... CVE-2010-2813 Fix available 5.0 MediumAugust 12, 2010
• squirrelmail, apple mac os x, mac os x server +4 more +6 more The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to... CVE-2010-1637 Fix available 6.5 MediumJune 22, 2010
• squirrelmail Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier,... CVE-2009-2964 Fix available 6.8 MediumAugust 25, 2009
• squirrelmail, squirrelmail imap general.php +1 more The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian... CVE-2009-1381 Fix available 6.8 MediumMay 21, 2009
• squirrelmail functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from... CVE-2009-1581 Fix available 4.3 MediumMay 14, 2009
• squirrelmail Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack... CVE-2009-1580 Fix available 5.8 MediumMay 14, 2009
• squirrelmail The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail... CVE-2009-1579 Fix available 6.8 MediumMay 14, 2009
• squirrelmail Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail... CVE-2009-1578 Fix available 4.3 MediumMay 14, 2009
• squirrelmail A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all... CVE-2009-0030 Fix available 6.5 MediumJanuary 21, 2009
• squirrelmail Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to... CVE-2008-2379 Fix available 4.3 MediumDecember 5, 2008
• squirrelmail Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session,... CVE-2008-3663 Fix available 5.0 MediumSeptember 24, 2008
• squirrelmail SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been... CVE-2007-6348 6.8 MediumDecember 14, 2007
• squirrelmail gpg plugin PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before... CVE-2007-3779 4.3 MediumJuly 15, 2007
• squirrelmail gpg plugin The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers... CVE-2007-3778 7.5 HighJuly 15, 2007
• squirrelmail gpg plugin Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before... CVE-2006-4169 5.5 MediumJuly 15, 2007
• squirrelmail, squirrelmail gpg plugin +1 more Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote... CVE-2007-3636 Public exploit 7.5 HighJuly 10, 2007
• squirrelmail, squirrelmail gpg plugin +1 more Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might... CVE-2007-3635 4.3 MediumJuly 10, 2007
• squirrelmail gpg plugin Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote... CVE-2007-3634 6.5 MediumJuly 10, 2007
• squirrelmail Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows... CVE-2007-2631 7.5 HighMay 13, 2007
• squirrelmail Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4... CVE-2007-2589 Fix available 5.0 MediumMay 11, 2007
• squirrelmail Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0... CVE-2007-1262 Fix available 4.3 MediumMay 11, 2007
• squirrelmail Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow... CVE-2006-6142 Fix available 6.8 MediumDecember 5, 2006
• squirrelmail Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows... CVE-2006-4019 Public exploitFix available 6.4 MediumAugust 11, 2006
• squirrelmail SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack... CVE-2006-3665 4.3 MediumJuly 17, 2006
• squirrelmail Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when... CVE-2006-3174 2.6 LowJune 23, 2006
• squirrelmail ** DISPUTED ** PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1... CVE-2006-2842 Public exploitFix availableDisputed EPSS 47.2% 7.5 HighJune 6, 2006
• squirrelmail CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject... CVE-2006-0377 Fix available 5.0 MediumFebruary 24, 2006
• squirrelmail Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote... CVE-2006-0195 Fix available 4.3 MediumFebruary 24, 2006
• squirrelmail webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages... CVE-2006-0188 Fix available 4.3 MediumFebruary 24, 2006
• squirrelmail gpg plugin The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to... CVE-2005-1924 Public exploit EPSS 10.3% 9.3 HighDecember 31, 2005
• squirrelmail address add plugin Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for... CVE-2005-3128 Public exploit 4.3 MediumOctober 4, 2005
• Show olderLoading…