Mandriva Linux Security Advisory – A number of HTML filtering bugs were found in SquirrelMail that could allow an attacker to inject arbitrary JavaScript leading to cross-site scripting attacks by sending an email viewed by a user within SquirrelMail. As well, SquirrelMail did not sufficiently check arguments to IMG tags in HTML messages that could be exploited by an attacker by sending arbitrary email messages on behalf of a SquirrelMail user tricked into opening a maliciously-crafted HTML email message.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56886/MDKSA-2007-106.txt
Source: https://packetstormsecurity.com/files/56886/Mandriva-Linux-Security-Advisory-2007.106.html