# CVEs published 2006-02-07 10 CVEs were published on February 7, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0575](https://cve.now/CVE-2006-0575.md): convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink at (no CVSS) - [CVE-2006-0454](https://cve.now/CVE-2006-0454.md): Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp\_send, does not properly handle when the ip\_options\_ (no CVSS) - [CVE-2006-0567](https://cve.now/CVE-2006-0567.md): Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is blank, (no CVSS) - [CVE-2006-0568](https://cve.now/CVE-2006-0568.md): Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web script or HTML via the fi (no CVSS) - [CVE-2006-0569](https://cve.now/CVE-2006-0569.md): Cross-site scripting (XSS) vulnerability in user\_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-0570](https://cve.now/CVE-2006-0570.md): Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc\_magic\_quotes is disabled, allow remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2006-0571](https://cve.now/CVE-2006-0571.md): Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unkno (no CVSS) - [CVE-2006-0572](https://cve.now/CVE-2006-0572.md): phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication. (no CVSS) - [CVE-2006-0573](https://cve.now/CVE-2006-0573.md): Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-0574](https://cve.now/CVE-2006-0574.md): Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-02-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.