CVE-2003-0160: Squirrelmail

Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.

Affected products

• Squirrelmail Squirrelmail: up to and including 1.2.11

Published 2003-04-02. Last modified 2026-06-16.