CVE-2009-2964: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

CVE-2004-0639: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via 1 the $mailer variable in readbody.php, 2 the $senderNamespart variable in mailboxdisplay.php, and possibly other vectors including 3 the $eventtitle...