The SquirrelMail Project Team is proud to announce the release of SquirrelMail 1.4.8.
SquirrelMail is a PHP4-based Web email client. It includes built-in pure PHP support for IMAP and SMTP, and renders all pages in pure HTML 4.0 for maximum compatibility across browsers. It has strong MIME support and a flexible plugin system.
This release contains an important security fix where a logged-in user could overwrite variables, and a collection of regular bugfixes. Details on all the changes in this release can be found in the ChangeLog.
There's also two patches available against the 1.4.7 release for just the security issue: a minimal one that removes the function, because it was broken anyway, or more extended one which fixes the functionality and closes the hole.
To grab your copy of the latest version, go to the Download page: