CVE:CVE-2004-0639
CNNVD:CNNVD-200408-022
Squirrelmail 1.2.10以及之前的版本存在多个跨站脚本攻击(XSS)漏洞。远程攻击者借助（1）read_body.php的$mailer变量，（2）mailbox_display.php的$senderNames_part变量，和可能包括（3）$event_title变量或（4）$event_text变量的其它向量注入任意HTML或脚本。
solution:Upgrade open_webmail open_webmail to a higher version than 2.30,2.31,2.32,and avoid the version 2.30,2.31,2.32; Upgrade sgi propack to a higher version than 3.0,and avoid the version 3.0; Upgrade squirrelmail squirrelmail to a higher version than 1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.4,1.4.1,1.4.2,1.4.3_rc1,1.5_dev,and avoid the version 1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.4,1.4.1,1.4.2,1.4.3_rc1,1.5_dev