CVE-2005-0183: Squirrelmail Vacation Plugin

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument.

Affected products

• Squirrelmail Vacation Plugin: up to and including 0.15

Published 2005-05-02. Last modified 2026-06-16.