https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:24:31.996499+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-213 certa-2007-avi-213 — Plusieurs vulnérabilités affectant SquirrelMail permettent à un attaquant d'effectuer des attaques de type <span class=… 2026-10-04T14:24:32.001517+00:00 certa-2007-avi-213 https://cve.radiocsirt.org/vuln/euvd-2026-133295 EUVD-2026-133295 2026-10-04T14:24:32.001558+00:00 EUVD-2026-133295 https://cve.radiocsirt.org/vuln/fkie_cve-2007-1262 fkie_cve-2007-1262 2026-10-04T14:24:32.001573+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.

 https://cve.radiocsirt.org/vuln/ghsa-54w4-g2h9-3rxv GHSA-54w4-g2h9-3rxv 2026-10-04T14:24:32.001603+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.

 https://cve.radiocsirt.org/vuln/gsd-2007-1262 gsd-2007-1262 2026-10-04T14:24:32.001619+00:00 gsd-2007-1262 https://cve.radiocsirt.org/vuln/jvndb-2007-000398 jvndb-2007-000398 2026-10-04T14:24:32.001629+00:00

SquirrelMail contains a cross-site scripting vulnerability. SquirrelMail from SquirrelMail Project is an open source webmail (web-based email). SquirrelMail contains an issue in handling specific character encoding and processing "data:" URL, which may result in cross-site scripting. Yosuke Hasegawa from Matcha139 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/rhsa-2007:0358 RHSA-2007:0358 — Red Hat Security Advisory: squirrelmail security update 2026-10-04T14:24:32.001648+00:00

XSS through HTML message in squirrelmail CSRF through HTML message in squirrelmail