CVE-2009-1581
N/A
Published: May 14, 2009 at 05:00 PM UTC
Updated: June 16, 2026 at 11:07 PM UTC
1 product affected across 1 vendorSquirrelMail
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.4.170.10.1.10.1.20.20.2.10.30.3.10.3pre10.3pre20.40.4pre10.4pre20.50.5pre10.5pre21.01.0.11.0.21.0.31.0.41.0.51.0.61.0pre11.0pre21.0pre31.1.01.1.11.1.21.1.31.21.2.01.2.0_rc31.2.11.2.101.2.111.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.91.3.01.3.11.3.21.41.4.01.4.0_rc11.4.0_rc2a1.4.11.4.101.4.10a1.4.111.4.121.4.151.4.15_rc11.4.16
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (23)
Vendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/35052Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/35073Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card