Skip to content
OpenAdvisories
Unscored DSA-1682-1 1 CVE

squirrelmail - cross site scripting

Published Dec 7, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 squirrelmail 2:1.4.9a-3

Vulnerabilities 1

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web …