CVE:CVE-2008-3663
CNNVD:CNNVD-200809-309
Squirrelmail 1.4.15 对https会话中的会话cookie不设置安全标记，这肯能造成在http请求中发射cookie同时使远程攻击者获得该cookie变得简单。
solution:Upgrade squirrelmail squirrelmail to a higher version than 1.4.15,and avoid the version 1.4.15