Two Cross-site scripting vulnerabilities have been found that affect SquirrelMail version 1.2.7 and earlier.