USN-4669-1: SquirrelMail vulnerability
It was discovered that a cross-site scripting (XSS) vulnerability in
SquirrelMail allows remote attackers to use malicious script content from
HTML e-mail to execute code and/or provoke a denial of service.
Source: USN-4669-1: SquirrelMail vulnerability
