SquirrelMail

Records74All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

SquirrelMail records in CISA KEV

No SquirrelMail vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Squirrelmail 64 records MEDIUM Gpg Plugin 7 records MEDIUM Address Add Plugin 1 record LOW Change Passwd 1 record LOW Imap General.php 1 record LOW S Mime Plugin 1 record MEDIUM Vacation Plugin 1 record LOW

Records

1 record in Address Add Plugin · all components

TI-2005-02956 CVE-2005-3128 · GHSA-mq36-cw38-g8hv

Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for…

LOW 26

Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03436 Published 2005-10-04 No fix listed

Open these records in search →

Critical	4
High	17
Medium	52
Low	1
No CVSS	0