CVE-2009-1580

Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.

Date published : 2009-05-14

http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

http://www.securityfocus.com/bid/34916