# CVEs published 2006-03-24 20 CVEs were published on March 24, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-1388](https://cve.now/CVE-2006-1388.md): Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors. (no CVSS) - [CVE-2002-2209](https://cve.now/CVE-2002-2209.md): Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors. (no CVSS) - [CVE-2003-1299](https://cve.now/CVE-2003-1299.md): Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated… (no CVSS) - [CVE-2003-1300](https://cve.now/CVE-2003-1300.md): Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a… (no CVSS) - [CVE-2006-0816](https://cve.now/CVE-2006-0816.md): Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (no CVSS) - [CVE-2006-1379](https://cve.now/CVE-2006-1379.md): Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users… (no CVSS) - [CVE-2006-1380](https://cve.now/CVE-2006-1380.md): ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121… (no CVSS) - [CVE-2006-1381](https://cve.now/CVE-2006-1381.md): Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to… (no CVSS) - [CVE-2006-1382](https://cve.now/CVE-2006-1382.md): PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register\_globals is disabled, allows… (no CVSS) - [CVE-2006-1383](https://cve.now/CVE-2006-1383.md): Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files… (no CVSS) - [CVE-2006-1384](https://cve.now/CVE-2006-1384.md): Cross-site scripting (XSS) vulnerability in apwc\_win\_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before… (no CVSS) - [CVE-2006-1385](https://cve.now/CVE-2006-1385.md): Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute… (no CVSS) - [CVE-2005-2711](https://cve.now/CVE-2005-2711.md): ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure… (no CVSS) - [CVE-2006-1372](https://cve.now/CVE-2006-1372.md): Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the… (no CVSS) - [CVE-2006-1373](https://cve.now/CVE-2006-1373.md): Cross-site scripting (XSS) vulnerability in status\_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2006-1374](https://cve.now/CVE-2006-1374.md): SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-1375](https://cve.now/CVE-2006-1375.md): AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php… (no CVSS) - [CVE-2006-1376](https://cve.now/CVE-2006-1376.md): The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable… (no CVSS) - [CVE-2006-1377](https://cve.now/CVE-2006-1377.md): Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject… (no CVSS) - [CVE-2006-1378](https://cve.now/CVE-2006-1378.md): PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-03-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.