Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

squirrelmail

About This Vendor

squirrelmail is a technology vendor producing software and infrastructure products. As a software provider, squirrelmail's broad product portfolio across multiple domains—including operating systems, cloud infrastructure, enterprise applications, databases, networking, and security tools—creates a large attack surface. Additionally, long support cycles, widespread deployment, and continuous feature development contribute to the accumulation of discovered vulnerabilities over time. Major vendors typically report higher CVE counts not necessarily due to inferior security, but because of greater exposure to security research, responsible disclosure practices, and the sheer complexity of maintaining multiple product lines and legacy systems. Regular security assessments and patching of squirrelmail's products are critical for organizations running their software in production environments.

Vulnerability Trends for This Vendor

SecUtils has indexed 76 known vulnerabilities from squirrelmail. This includes 1 critical-severity issue and 20 high-severity issues that represent significant risk. These vulnerabilities affect 20 distinct products across squirrelmail's portfolio, demonstrating the breadth of the vendor's product ecosystem and the importance of comprehensive patch management strategies. Disclosure dates span from 2001 through 2020, indicating decades of continuous security attention and research. Organizations deploying squirrelmail products should maintain active vulnerability monitoring, prioritize critical patches, and implement compensating controls where patches cannot be applied immediately.

ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2001-1159 2001-07-02 2025-04-03 - 7.5 Likely
CVE-2002-0516 2002-08-12 2025-04-03 - 10.0 Likely
CVE-2002-1131 2002-10-04 2025-04-03 - 7.5 Likely
CVE-2002-1132 2002-10-04 2025-04-03 - 5.0 Likely
CVE-2002-1276 2002-11-29 2025-04-03 - 4.3 Likely
CVE-2002-1341 2002-12-18 2025-04-03 - 6.8 Likely
CVE-2002-1648 2002-12-31 2025-04-03 - 7.5 Likely
CVE-2002-1649 2002-12-31 2025-04-03 - 4.3 Likely
CVE-2002-1650 2002-12-31 2025-04-03 - 7.5 Likely
CVE-2002-2086 2002-12-31 2025-04-03 - 4.3 Likely
CVE-2003-0160 2003-04-02 2025-04-03 - 5.8 Likely
CVE-2003-0990 2004-01-20 2025-04-03 - 7.5 Likely
CVE-2004-0639 2004-08-06 2025-04-03 - 6.8 Likely
CVE-2004-0519 2004-08-18 2025-04-03 - 6.8 Likely
CVE-2004-0520 2004-08-18 2025-04-03 - 6.8 Likely
CVE-2004-0521 2004-08-18 2025-04-03 - 10.0 Likely
CVE-2005-0103 2005-01-24 2025-04-03 - 7.5 Likely
CVE-2005-0075 2005-01-29 2025-04-03 - 5.0 Likely
CVE-2005-0104 2005-01-29 2025-04-03 - 4.3 Likely
CVE-2005-0152 2005-02-02 2025-04-03 - 7.5 Likely
CVE-2004-1036 2005-03-01 2025-04-03 - 6.8 Likely
CVE-2005-0183 2005-05-02 2025-04-03 - 7.2 Unknown
CVE-2005-0184 2005-05-02 2025-04-03 - 2.1 Unknown
CVE-2005-0239 2005-05-02 2025-04-03 - 7.5 Likely
CVE-2005-1769 2005-06-16 2025-04-03 - 4.3 Likely
CVE-2005-2095 2005-07-13 2025-04-03 - 4.3 Likely
CVE-2005-3128 2005-10-04 2025-04-03 - 4.3 Likely
CVE-2005-1924 2005-12-31 2025-04-03 - 9.3 Likely
CVE-2006-0188 2006-02-24 2025-04-03 - 4.3 Likely
CVE-2006-0195 2006-02-24 2025-04-03 - 4.3 Likely
CVE-2006-0377 2006-02-24 2025-04-03 - 5.0 Likely
CVE-2006-2842 2006-06-06 2025-04-03 - 7.5 Likely
CVE-2006-3174 2006-06-23 2025-04-03 - 2.6 Unknown
CVE-2006-3665 2006-07-18 2025-04-03 - 4.3 Likely
CVE-2006-4019 2006-08-11 2025-04-03 - 6.4 Likely
CVE-2006-6142 2006-12-05 2025-04-09 - 6.8 Likely
CVE-2007-1262 2007-05-11 2025-04-09 - 4.3 Likely
CVE-2007-2589 2007-05-11 2025-04-09 - 5.0 Likely
CVE-2007-2631 2007-05-13 2025-04-09 - 7.5 Likely
CVE-2007-3634 2007-07-10 2025-04-09 - 6.5 Likely
CVE-2007-3635 2007-07-10 2025-04-09 - 4.3 Unknown
CVE-2007-3636 2007-07-10 2025-04-09 - 7.5 Likely
CVE-2006-4169 2007-07-15 2025-04-09 - 5.5 Likely
CVE-2007-3778 2007-07-15 2025-04-09 - 7.5 Likely
CVE-2007-3779 2007-07-15 2025-04-09 - 4.3 Likely
CVE-2007-6348 2007-12-14 2025-04-09 - 6.8 Likely
CVE-2008-3663 2008-09-24 2025-04-09 - 5.0 Likely
CVE-2008-2379 2008-12-05 2025-04-09 - 4.3 Likely
CVE-2009-0030 2009-01-21 2025-04-09 - 6.5 Likely
CVE-2009-1578 2009-05-14 2025-04-09 - 4.3 Likely
CVE-2009-1579 2009-05-14 2025-04-09 - 6.8 Likely
CVE-2009-1580 2009-05-14 2025-04-09 - 5.8 Likely
CVE-2009-1581 2009-05-14 2025-04-09 - 4.3 Likely
CVE-2009-1381 2009-05-22 2025-04-09 - 6.8 Likely
CVE-2009-2964 2009-08-25 2025-04-09 - 6.8 Likely
CVE-2010-1637 2010-06-22 2025-04-11 6.5 4.0 Likely
CVE-2010-2813 2010-08-19 2025-04-11 - 5.0 Likely
CVE-2010-4554 2011-07-14 2025-04-11 - 4.3 Likely
CVE-2010-4555 2011-07-14 2025-04-11 - 4.3 Likely
CVE-2011-2023 2011-07-14 2025-04-11 - 4.3 Likely
CVE-2011-2752 2011-07-17 2025-04-11 - 5.8 Likely
CVE-2011-2753 2011-07-17 2025-04-11 - 6.8 Likely
CVE-2012-0323 2012-03-09 2025-04-11 - 4.3 Likely
CVE-2012-2124 2013-01-18 2025-04-11 - 5.0 Likely
CVE-2017-7692 2017-04-20 2025-04-20 8.8 9.0 Likely
CVE-2018-8741 2018-03-17 2024-11-21 8.8 6.5 Likely
CVE-2018-14950 2018-08-05 2024-11-21 6.1 4.3 Likely
CVE-2018-14951 2018-08-05 2024-11-21 6.1 4.3 Likely
CVE-2018-14952 2018-08-05 2024-11-21 6.1 4.3 Likely
CVE-2018-14953 2018-08-05 2024-11-21 6.1 4.3 Likely
CVE-2018-14954 2018-08-05 2024-11-21 6.1 4.3 Likely
CVE-2018-14955 2018-08-05 2024-11-21 6.1 4.3 Likely
CVE-2019-12970 2019-07-01 2024-11-21 6.1 4.3 Likely
CVE-2012-5623 2020-02-13 2024-11-21 7.5 5.0 Likely
CVE-2020-14932 2020-06-20 2024-11-21 9.8 7.5 Likely
CVE-2020-14933 2020-06-20 2024-11-21 8.8 6.5 Likely

How SecUtils Normalizes Vendor Data

SecUtils aggregates National Vulnerability Database (NVD) and MITRE records for squirrelmail by normalizing vendor identifiers across diverse data sources, mapping vendor names to their associated product lines, and collecting all known vulnerabilities under a unified vendor context. For every CVE associated with squirrelmail's products, we extract and structure Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) categories, CVSS severity metrics, and reference links to enable rapid vulnerability identification and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and vendor vulnerability tracking.