Squirrelmail

Squirrelmail is a widely deployed webmail application notable for its prominent role in email access infrastructure, despite a narrow product portfolio. The vendor's vulnerability footprint concentrates across its core webmail interface and ancillary plugins such as GPG integration, vacation auto-reply, and password-change handlers, reflecting the broad input surface and state-management demands of web-based email clients. Vulnerabilities affecting this vendor recur through weakness classes centered on web-layer input handling—including cross-site scripting, code injection, and cross-site request forgery—alongside generic or placeholder classifications that suggest a history of varied flaw types. Public exploit tooling has frequently been associated with this vendor's disclosures, consistent with the appeal of email infrastructure as a target for credential theft and account compromise. Current severity, exploitation activity, and exposure counts are shown alongside this summary.