A vulnerability has been discovered in SquirrelMail. Due to unsanitized user input, a specially crafted e-mail being read by the victim using SquirrelMail will make injection of arbitrary tags possible. When correctly exploited, it will permit the execution of scripts (JavaScript, VBScript, etc) running in the context of victim’s browser.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33460/RS-Labs-Advisory-2004-1.txt
Source: https://packetstormsecurity.com/files/33460/RS-Labs-Advisory-2004-1.txt.html