The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade squirrelmail | Dec 10, 2025 | Feb 24, 2006 |
| Gentoo Linux | — | Upgrade mail-client/squirrelmail. | Oct 30, 2017 | Feb 23, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub