CVE-2002-1649
Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.
Date published : 2005-03-28
http://www.securityfocus.com/bid/3956
http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html