CVE-2007-3778: The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute...

Security readout for executives and security teams

This flaw affects the SquirrelMail G/PGP Plugin and can let a remote sender cause command execution on the mail web server through crafted email content. The risk is serious where old SquirrelMail installations still use this plugin. The source bundle does not show active exploitation or a current vendor patch notice. Exposure is likely limited to legacy SquirrelMail deployments with the G/PGP Plugin installed, especially version 2.0 or 2.1dev builds before 2006-09-12. Organizations without SquirrelMail or without this plugin are not indicated as affected by the provided sources. Treat as high priority only if legacy SquirrelMail with the G/PGP Plugin is present. The business issue is potential server compromise from email content. If SquirrelMail is not in use, this CVE should be closed as not applicable with evidence. Mitigation focus: Inventory all SquirrelMail instances and confirm whether the G/PGP Plugin is installed.; Disable or remove the G/PGP Plugin where it is not business-critical.; Check vendor or archive guidance for releases after 2006-09-12 before upgrading..

Prepared

Jun 29, 2026, 04:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.