The chpasswd binary plugin version 3.x that comes with SquirrelMail is susceptible to a buffer overflow.