SquirrelMail leaks usernames and passwords by passing this information base64 encoded during every post.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68986/squirrelmail-leak.txt
Source: https://packetstormsecurity.com/files/68986/squirrelmail-leak.txt.html