CVE-2004-0639

Multiple cross-site scripting XSS vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via 1 the $mailer variable in readbody.php, 2 the $senderNamespart variable in mailboxdisplay.php, and possibly other vectors including 3 the $eventtitle...