CVE:CVE-2007-3635
CNNVD:CNNVD-200707-124
Squirrelmail G/PGP (GPG) Plugin 2.1版本之前的版本中存在未明漏洞。远程验证用户可以借助可能与一个"危险的PHP调用"相关的未明向量，注入某些指令。
solution:Upgrade squirrelmail gpg_plugin to a higher version than 2.0,and avoid the version 2.0; Upgrade squirrelmail squirrelmail to a higher version than 1.4.10a,and avoid the version 1.4.10a