What’s Vulnerable › Vulnerabilities

CVE-2003-0160

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-04-02 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.

Affected products

• SquirrelMail: through 1.2.11

References

• http://sourceforge.net/mailarchive/forum.php?thread_id=1641953&forum_id=1988
• http://www.redhat.com/support/errata/RHSA-2003-112.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A614
• http://sourceforge.net/mailarchive/forum.php?thread_id=1641953&forum_id=1988
• http://www.redhat.com/support/errata/RHSA-2003-112.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A614

Get alerted when CVE-2003-0160 or the next vulnerability affects your stack