# CVEs published 2006-02-07

10 CVEs were published on February 7, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0575](https://cve.now/CVE-2006-0575.md): convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink… (no CVSS)
- [CVE-2006-0454](https://cve.now/CVE-2006-0454.md): Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp\_send, does not properly handle when the… (no CVSS)
- [CVE-2006-0567](https://cve.now/CVE-2006-0567.md): Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is… (no CVSS)
- [CVE-2006-0568](https://cve.now/CVE-2006-0568.md): Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2006-0569](https://cve.now/CVE-2006-0569.md): Cross-site scripting (XSS) vulnerability in user\_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-0570](https://cve.now/CVE-2006-0570.md): Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc\_magic\_quotes is disabled, allow remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-0571](https://cve.now/CVE-2006-0571.md): Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-0572](https://cve.now/CVE-2006-0572.md): phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication. (no CVSS)
- [CVE-2006-0573](https://cve.now/CVE-2006-0573.md): Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-0574](https://cve.now/CVE-2006-0574.md): Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.