RedHat Security Advisory RHSA-2009:0010

The remote host is missing updates announced in advisory RHSA-2009:0010. Ivan Markovic discovered a cross-site scripting XSS flaw in SquirrelMail caused by insufficient HTML mail sanitization. A remote attacker could send a specially-crafted HTML mail or attachment that could cause a user...