squirrelmail squirrelmail: session hijacking vulnerability squirrelmail: session hijacking vulnerability Squirrelmail was updated to use the secure flag for its cookies. Otherwise it was possible to hijack a SSL-protected session via leaked cookies. (CVE-2008-3663) Squirrelmail was updated to use the secure flag for its cookies. Otherwise it was possible to hijack a SSL-protected session via leaked cookies. (CVE-2008-3663) security squirrelmail noarch 60967e449b1020cef90a62b192aa85ad1e21a57e