CVE-2007-2631: Squirrelmail

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors. NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648.

Affected products

• Squirrelmail Squirrelmail: up to and including 1.4.8.4fc6

Published 2007-05-13. Last modified 2026-06-16.