CVE-2007-3635: Squirrelmail Gpg Plugin

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.

Affected products

• Squirrelmail Gpg Plugin: version 2.0 only
• Squirrelmail Squirrelmail: version 1.4.10a only

Published 2007-07-10. Last modified 2026-06-16.