Login Request a demo
SQ
Product
SquirrelMail
by SquirrelMail · last CVE Apr 2, 2025
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities65In the news0Timeline
Severity mix
Critical 1High 4Medium 8Low 0
Severity
All severities65Critical1High4Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SquirrelMail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14933
8.8
1%
Jun 20
compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request
Affected: 1.4.22
CVE-2018-8741
8.8
4%
Mar 17
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related to ../ in the…
Affected: 1.4.22
CVE-2017-7692
8.8
32%
Apr 20
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call
Affected: 1.4.22
CVE-2025-30090
7.2
0%
Apr 2
mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded…
Affected: through 1.4.23-svn-20250401; 1.5 through 1.5.2-svn-20250401
Showing 4