CVE-2008-2379
Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message.
Date published : 2008-12-04
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html