Unscored DSA-1802-1 4 CVEs

squirrelmail - several vulnerabilities

Published May 19, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	squirrelmail	2:1.4.9a-4
Debian · 5.0	squirrelmail	2:1.4.15-4+lenny1

Vulnerabilities 4

Unscored —

CVE-2009-1578

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote a…

May 14, 2009
Unscored —

CVE-2009-1579

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows rem…

May 14, 2009
Unscored —

CVE-2009-1580

Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a craft…

May 14, 2009
Unscored —

CVE-2009-1581

functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets…

May 14, 2009