Unscored DSA-2291-1 5 CVEs

squirrelmail - various issues

Published Aug 8, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	squirrelmail	2:1.4.15-4+lenny5
Debian · 6.0	squirrelmail	2:1.4.21-2

Vulnerabilities 5

Unscored —

CVE-2010-4554

functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-…

Jul 14, 2011
Unscored —

CVE-2010-4555

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject…

Jul 14, 2011
Unscored —

CVE-2011-2023

Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to…

Jul 14, 2011
Unscored —

CVE-2011-2752

CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference val…

Jul 17, 2011
Unscored —

CVE-2011-2753

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to…

Jul 17, 2011