CVE-2011-2752: Squirrelmail

Medium severity, CVSS 5.8. EPSS: 1.9% chance of exploitation in the next 30 days.

CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \n (newline) character, a different vulnerability than CVE-2010-4555.

Affected products

• Squirrelmail Squirrelmail: up to and including 1.4.21; version 0.1 only; version 0.1.1 only; version 0.1.2 only; version 0.2 only; version 0.2.1 only; …

Published 2011-07-17. Last modified 2026-06-16.