Unscored DSA-988-1 3 CVEs

squirrelmail - several

Published Mar 8, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.0	squirrelmail	1.2.6-5
Debian · 3.1	squirrelmail	2:1.4.4-8

Vulnerabilities 3

Unscored —

CVE-2006-0188

webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame v…

Feb 24, 2006
Unscored —

CVE-2006-0195

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross…

Feb 24, 2006
Unscored —

CVE-2006-0377

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands v…

Feb 24, 2006