Unscored DSA-2091-1 2 CVEs

squirrelmail - cross-site request forgery

Published Aug 12, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	squirrelmail	2:1.4.15-4+lenny3.1

Vulnerabilities 2

Unscored —

CVE-2009-2964

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, …

Aug 25, 2009
Unscored —

CVE-2010-2813

functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which …

Aug 19, 2010