Login Request a demo
SQ
Product
Squirrelmail
by Squirrelmail · last CVE Jun 20, 2020
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities64In the news0Timeline
Severity mix
Critical 1High 3Medium 8Low 0
Severity
All severities64Critical1High3Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Squirrelmail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2010-1637
6.5
3%
Jun 22
The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal…
Affected: through 1.4.20
CVE-2019-12970
6.1
2%
Jul 1
XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2
Affected: through 1.4.22; 1.5.0 through 1.5.2
CVE-2018-14950
6.1
1%
Aug 5
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack
Affected: through 1.4.22
CVE-2018-14955
6.1
1%
Aug 5
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute)
Affected: through 1.4.22
CVE-2018-14954
6.1
2%
Aug 5
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute
Affected: through 1.4.22
CVE-2018-14953
6.1
1%
Aug 5
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack
Affected: through 1.4.22
CVE-2018-14952
6.1
1%
Aug 5
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack
Affected: through 1.4.22
CVE-2018-14951
6.1
1%
Aug 5
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack
Affected: through 1.4.22
Showing 8