Mandriva Linux Security Advisory MDKSA-2006-147 – A cross-site scripting (XSS) vulnerability exists in search.php in SquirrelMail versions 1.5.1 and below, when register_globals is enabled, allowing remote attackers to inject arbitrary HTML via the mailbox parameter.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49448/MDKSA-2006-147.txt
Source: https://packetstormsecurity.com/files/49448/Mandriva-Linux-Security-Advisory-2006.147.html