Squirrelmail
Approved changes feed: RSS · Atom
cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Squirrelmail (53f64d69-42c3-5c49-8690-e66c5b6ca053) |
|---|---|
| Product | Squirrelmail (2ace0a45-e551-5a60-86d7-16eaf090c4a3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/realityripple/squirrelmail |
purl2cpe | 2026-06-01 10:18:10.950085 |
pkg:rpm/fedora/squirrelmail |
purl2cpe | 2026-06-01 10:18:10.950088 |
pkg:rpm/opensuse/squirrelmail |
purl2cpe | 2026-06-01 10:18:10.950091 |
pkg:sourceforge/squirrelmail |
purl2cpe | 2026-06-01 10:18:10.950094 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-30090 |
vulnerable | 2026-06-08 07:16:59.055385 |
Details available
HIGH (7.2)
mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.
Published: 2025-04-02T00:00:00.000Z
Updated: 2025-04-02T13:27:48.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12970 |
vulnerable | 2026-06-08 05:12:40.732730 |
Details available
XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mail can be executed within the application context via crafted use of (for example) a NOEMBED, NOFRAMES, NOSCRIPT, or TEXTAREA element.
Published: 2019-07-01T10:32:05.000Z
Updated: 2024-08-04T23:41:09.227Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14955 |
vulnerable | 2026-06-08 05:10:53.714339 |
Details available
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
Published: 2018-08-05T18:00:00.000Z
Updated: 2024-08-05T09:46:24.700Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14954 |
vulnerable | 2026-06-08 05:10:53.714005 |
Details available
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
Published: 2018-08-05T18:00:00.000Z
Updated: 2024-08-05T09:46:25.293Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14953 |
vulnerable | 2026-06-08 05:10:53.713678 |
Details available
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
Published: 2018-08-05T18:00:00.000Z
Updated: 2024-08-05T09:46:25.308Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14952 |
vulnerable | 2026-06-08 05:10:53.713309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14951 |
vulnerable | 2026-06-08 05:10:53.712835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14950 |
vulnerable | 2026-06-08 05:10:53.712367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5623 |
vulnerable | 2026-06-08 05:02:57.564475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2753 |
vulnerable | 2026-06-08 04:58:09.078946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2752 |
vulnerable | 2026-06-08 04:58:09.076537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2023 |
vulnerable | 2026-06-08 04:58:03.476436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4555 |
vulnerable | 2026-06-08 04:56:29.189413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4554 |
vulnerable | 2026-06-08 04:56:29.123945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2813 |
vulnerable | 2026-06-08 04:55:10.810683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1637 |
vulnerable | 2026-06-08 04:54:09.530791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2964 |
vulnerable | 2026-06-08 04:51:31.587548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1581 |
vulnerable | 2026-06-08 04:51:24.135772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1580 |
vulnerable | 2026-06-08 04:51:24.110591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1579 |
vulnerable | 2026-06-08 04:51:24.108523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1578 |
vulnerable | 2026-06-08 04:51:24.071931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2379 |
vulnerable | 2026-06-08 04:50:23.742774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2631 |
vulnerable | 2026-06-08 04:49:45.589056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3174 |
vulnerable | 2026-06-08 04:49:08.486074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2842 |
vulnerable | 2026-06-08 04:49:07.669614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0160 |
vulnerable | 2026-06-08 04:47:20.846802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1132 |
vulnerable | 2026-06-08 04:46:23.018019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1131 |
vulnerable | 2026-06-08 04:46:23.017627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.