# CVEs published 2006-02-25

14 CVEs were published on February 25, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0885](https://cve.now/CVE-2006-0885.md): Cross-site scripting (XSS) vulnerability in show\_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2006-0886](https://cve.now/CVE-2006-0886.md): Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-0887](https://cve.now/CVE-2006-0887.md): Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib distribution is avail (no CVSS)
- [CVE-2006-0888](https://cve.now/CVE-2006-0888.md): index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of se (no CVSS)
- [CVE-2006-0889](https://cve.now/CVE-2006-0889.md): Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText (no CVSS)
- [CVE-2006-0890](https://cve.now/CVE-2006-0890.md): Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommander 11.01.4450, allows remote at (no CVSS)
- [CVE-2006-0891](https://cve.now/CVE-2006-0891.md): Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (no CVSS)
- [CVE-2006-0892](https://cve.now/CVE-2006-0892.md): NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to exec (no CVSS)
- [CVE-2006-0893](https://cve.now/CVE-2006-0893.md): NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles directory, which leaks e-m (no CVSS)
- [CVE-2006-0894](https://cve.now/CVE-2006-0894.md): Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web script or HTML via (1 (no CVSS)
- [CVE-2006-0895](https://cve.now/CVE-2006-0895.md): NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php. (no CVSS)
- [CVE-2006-0896](https://cve.now/CVE-2006-0896.md): Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbit (no CVSS)
- [CVE-2006-0897](https://cve.now/CVE-2006-0897.md): SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2006-0898](https://cve.now/CVE-2006-0898.md): Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weak (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.