Skip to content

Squirrelmail vulnerabilities

Products

Newest

squirrelmailoptions_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the...CVE-2005-2095Public exploit4.3 MediumJuly 13, 2005
squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow...CVE-2005-17694.3 MediumJune 16, 2005
squirrelmail s mime pluginviewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute...CVE-2005-02397.5 HighFebruary 7, 2005
squirrelmail vacation pluginftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute...CVE-2005-01837.2 HighFebruary 6, 2005
squirrelmailPHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute...CVE-2005-01527.5 HighFebruary 1, 2005
squirrelmailCross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows...CVE-2005-01044.3 MediumJanuary 29, 2005
squirrelmailprefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to...CVE-2005-00755.0 MediumJanuary 29, 2005
squirrelmailPHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote...CVE-2005-01037.5 HighJanuary 24, 2005
squirrelmail, gentoo linux +1 moreCross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in...CVE-2004-1036Fix available6.8 MediumNovember 16, 2004
squirrelmail, open webmail webmail, sgi propack +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow...CVE-2004-0639Public exploit6.8 MediumJuly 9, 2004
squirrelmail, sgi propack +1 moreSQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute...CVE-2004-052110.0 HighJune 3, 2004
squirrelmail, open webmail webmail, sgi propack +2 moreCross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote...CVE-2004-0520Public exploit6.8 MediumJune 3, 2004
squirrelmail, sgi propack +1 moreMultiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers...CVE-2004-0519Public exploitEPSS 22.5%6.8 MediumJune 3, 2004
squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote...CVE-2003-01605.8 MediumMarch 26, 2003
squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6...CVE-2002-20864.3 MediumDecember 31, 2002
squirrelmailThe spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers...CVE-2002-16507.5 HighDecember 31, 2002
squirrelmailCross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows...CVE-2002-16494.3 MediumDecember 31, 2002
squirrelmailCross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3...CVE-2002-16487.5 HighDecember 31, 2002
squirrelmailCross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and...CVE-2002-1341Fix available6.8 MediumDecember 11, 2002
squirrelmailAn incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the...CVE-2002-12764.3 MediumNovember 7, 2002
squirrelmailSquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the...CVE-2002-11325.0 MediumOctober 4, 2002
squirrelmailCross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to...CVE-2002-1131Public exploitEPSS 25.8%7.5 HighSeptember 24, 2002
squirrelmailSquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary...CVE-2002-0516Public exploitEPSS 11.0%10.0 HighAugust 12, 2002
squirrelmailload_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly...CVE-2001-11597.5 HighJuly 2, 2001