CVE:CVE-2006-3174
CNNVD:CNNVD-200606-440
SquirrelMail 的 search.php 存在跨站脚本攻击漏洞，当register_globals启用时，允许远程攻击者通过邮箱参数注入任意HTML代码。
solution:Upgrade squirrelmail squirrelmail to a higher version than 1.5.1,and avoid the version (,1.5.1]