# CVEs published 2006-03-19

63 CVEs were published on March 19, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1296](https://cve.now/CVE-2003-1296.md): Easy File Sharing (EFS) Web Server 1.2 allows remote authenticated users to cause a denial of service via (1) an "empty symbol" in the… (no CVSS)
- [CVE-2003-1297](https://cve.now/CVE-2003-1297.md): Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2) log directory under the web root with… (no CVSS)
- [CVE-2005-4732](https://cve.now/CVE-2005-4732.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject… (no CVSS)
- [CVE-2005-4733](https://cve.now/CVE-2005-4733.md): NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system… (no CVSS)
- [CVE-2005-4734](https://cve.now/CVE-2005-4734.md): Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows… (no CVSS)
- [CVE-2005-4735](https://cve.now/CVE-2005-4735.md): IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash)… (no CVSS)
- [CVE-2005-4736](https://cve.now/CVE-2005-4736.md): IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via… (no CVSS)
- [CVE-2005-4737](https://cve.now/CVE-2005-4737.md): IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU… (no CVSS)
- [CVE-2005-4738](https://cve.now/CVE-2005-4738.md): IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object… (no CVSS)
- [CVE-2005-4739](https://cve.now/CVE-2005-4739.md): IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service… (no CVSS)
- [CVE-2005-4740](https://cve.now/CVE-2005-4740.md): IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd… (no CVSS)
- [CVE-2005-4741](https://cve.now/CVE-2005-4741.md): NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a… (no CVSS)
- [CVE-2005-4742](https://cve.now/CVE-2005-4742.md): Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and… (no CVSS)
- [CVE-2005-4743](https://cve.now/CVE-2005-4743.md): Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute… (no CVSS)
- [CVE-2006-1284](https://cve.now/CVE-2006-1284.md): The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default… (no CVSS)
- [CVE-2006-1285](https://cve.now/CVE-2006-1285.md): SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all… (no CVSS)
- [CVE-2006-1286](https://cve.now/CVE-2006-1286.md): Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions… (no CVSS)
- [CVE-2006-1287](https://cve.now/CVE-2006-1287.md): Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal… (no CVSS)
- [CVE-2006-1288](https://cve.now/CVE-2006-1288.md): Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute… (no CVSS)
- [CVE-2006-1289](https://cve.now/CVE-2006-1289.md): Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-1290](https://cve.now/CVE-2006-1290.md): Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2006-1291](https://cve.now/CVE-2006-1291.md): publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write access to the… (no CVSS)
- [CVE-2006-1292](https://cve.now/CVE-2006-1292.md): Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to include and execute… (no CVSS)
- [CVE-2006-1293](https://cve.now/CVE-2006-1293.md): Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-1294](https://cve.now/CVE-2006-1294.md): PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute… (no CVSS)
- [CVE-2006-1295](https://cve.now/CVE-2006-1295.md): Cross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-1296](https://cve.now/CVE-2006-1296.md): Untrusted search path vulnerability in Beagle 0.2.2.1 might allow local users to gain privileges via a malicious beagle-info program in… (no CVSS)
- [CVE-2006-1297](https://cve.now/CVE-2006-1297.md): Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware Servers and Remote Agent… (no CVSS)
- [CVE-2006-1298](https://cve.now/CVE-2006-1298.md): Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec 10d (10.1) for Windows… (no CVSS)
- [CVE-2006-1273](https://cve.now/CVE-2006-1273.md): Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of service (crash) via an HTML tag with a large number of… (no CVSS)
- [CVE-2006-1274](https://cve.now/CVE-2006-1274.md): Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users… (no CVSS)
- [CVE-2006-1275](https://cve.now/CVE-2006-1275.md): GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML… (no CVSS)
- [CVE-2006-1276](https://cve.now/CVE-2006-1276.md): admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin… (no CVSS)
- [CVE-2006-1277](https://cve.now/CVE-2006-1277.md): Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-1278](https://cve.now/CVE-2006-1278.md): SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to… (no CVSS)
- [CVE-2006-1279](https://cve.now/CVE-2006-1279.md): CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2)… (no CVSS)
- [CVE-2006-1280](https://cve.now/CVE-2006-1280.md): CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db\_file, which allows… (no CVSS)
- [CVE-2006-1281](https://cve.now/CVE-2006-1281.md): Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-1282](https://cve.now/CVE-2006-1282.md): CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting… (no CVSS)
- [CVE-2006-1260](https://cve.now/CVE-2006-1260.md): Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in… (no CVSS)
- [CVE-2006-1261](https://cve.now/CVE-2006-1261.md): Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-1262](https://cve.now/CVE-2006-1262.md): Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors. (no CVSS)
- [CVE-2006-1263](https://cve.now/CVE-2006-1263.md): Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-1264](https://cve.now/CVE-2006-1264.md): Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-1265](https://cve.now/CVE-2006-1265.md): SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-1266](https://cve.now/CVE-2006-1266.md): Cross-site scripting (XSS) vulnerability in Service\_Requests.asp in VPMi Enterprise 3.3 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-1267](https://cve.now/CVE-2006-1267.md): Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session… (no CVSS)
- [CVE-2006-1268](https://cve.now/CVE-2006-1268.md): The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 allows remote attackers to cause a denial of service and possibly execute… (no CVSS)
- [CVE-2006-1269](https://cve.now/CVE-2006-1269.md): Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command… (no CVSS)
- [CVE-2006-1270](https://cve.now/CVE-2006-1270.md): Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-1271](https://cve.now/CVE-2006-1271.md): SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynews\_comment\_id… (no CVSS)
- [CVE-2006-1272](https://cve.now/CVE-2006-1272.md): Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject… (no CVSS)
- [CVE-2006-1249](https://cve.now/CVE-2006-1249.md): Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2006-1250](https://cve.now/CVE-2006-1250.md): Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors. (no CVSS)
- [CVE-2006-1251](https://cve.now/CVE-2006-1251.md): Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with… (no CVSS)
- [CVE-2006-1252](https://cve.now/CVE-2006-1252.md): Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the… (no CVSS)
- [CVE-2006-1253](https://cve.now/CVE-2006-1253.md): Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a… (no CVSS)
- [CVE-2006-1254](https://cve.now/CVE-2006-1254.md): Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. (no CVSS)
- [CVE-2006-1255](https://cve.now/CVE-2006-1255.md): Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2006-1256](https://cve.now/CVE-2006-1256.md): Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to… (no CVSS)
- [CVE-2006-1257](https://cve.now/CVE-2006-1257.md): The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication… (no CVSS)
- [CVE-2006-1258](https://cve.now/CVE-2006-1258.md): Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2006-1259](https://cve.now/CVE-2006-1259.md): Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-03-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.