Unscored DSA-756-1 2 CVEs

squirrelmail - several

Published Jul 13, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.0	squirrelmail	1:1.2.6-4
Debian · 3.1	squirrelmail	2:1.4.4-6sarge1

Vulnerabilities 2

Unscored —

CVE-2005-1769

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to injec…

Jun 20, 2005
Unscored —

CVE-2005-2095 Public exploit

options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, whic…

Jul 13, 2005