Unscored DSA-1290-1 2 CVEs

squirrelmail

Published May 13, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.1	squirrelmail	2:1.4.4-11
Debian · 4.0	squirrelmail	2:1.4.9a-2

Vulnerabilities 2

Unscored —

CVE-2007-1262

Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remot…

May 11, 2007
Unscored —

CVE-2007-2589

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attac…

May 11, 2007