Skip to content
OpenAdvisories
Unscored DSA-535 4 CVEs

squirrelmail - several vulnerabilities

Published Aug 2, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 squirrelmail 1:1.2.6-1.4

Vulnerabilities 4

  • Unscored —
    CVE-2004-0519 Public exploit EPSS 23%

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary s…

  • Unscored —
    CVE-2004-0520 Public exploit

    Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert ar…

  • Unscored —
    CVE-2004-0521

    SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statem…

  • Unscored —
    CVE-2004-0639 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject…