RedHat Security Advisory RHSA-2009:1490

The remote host is missing updates announced in advisory RHSA-2009:1490. SquirrelMail is a standards-based webmail package written in PHP. Form submissions in SquirrelMail did not implement protection against Cross-Site Request Forgery CSRF attacks. If a remote attacker tricked a user into visiti...