Unscored DSA-662-1 2 CVEs

squirrelmail - several

Published Feb 1, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	squirrelmail	1:1.2.6-3

Vulnerabilities 2

Unscored —

CVE-2005-0104

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject …

Feb 6, 2005
Unscored —

CVE-2005-0152

PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "UR…

Feb 6, 2005