# CVEs published 2006-03-03 24 CVEs were published on March 3, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0386](https://cve.now/CVE-2006-0386.md): FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users (no CVSS) - [CVE-2006-0388](https://cve.now/CVE-2006-0388.md): Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary (no CVSS) - [CVE-2006-0389](https://cve.now/CVE-2006-0389.md): Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbi (no CVSS) - [CVE-2006-0391](https://cve.now/CVE-2006-0391.md): Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers (no CVSS) - [CVE-2006-0995](https://cve.now/CVE-2006-0995.md): EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a d (no CVSS) - [CVE-2006-0969](https://cve.now/CVE-2006-0969.md): PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrar (no CVSS) - [CVE-2006-0970](https://cve.now/CVE-2006-0970.md): PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers t (no CVSS) - [CVE-2006-0971](https://cve.now/CVE-2006-0971.md): Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-0972](https://cve.now/CVE-2006-0972.md): SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-0973](https://cve.now/CVE-2006-0973.md): SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute a (no CVSS) - [CVE-2006-0974](https://cve.now/CVE-2006-0974.md): Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-0976](https://cve.now/CVE-2006-0976.md): Directory traversal vulnerability in scan\_lang\_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary file (no CVSS) - [CVE-2006-0977](https://cve.now/CVE-2006-0977.md): Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external (no CVSS) - [CVE-2006-0978](https://cve.now/CVE-2006-0978.md): Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 (no CVSS) - [CVE-2006-0979](https://cve.now/CVE-2006-0979.md): Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors. (no CVSS) - [CVE-2006-0980](https://cve.now/CVE-2006-0980.md): Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2006-0981](https://cve.now/CVE-2006-0981.md): Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via cert (no CVSS) - [CVE-2006-0982](https://cve.now/CVE-2006-0982.md): The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from (no CVSS) - [CVE-2006-0983](https://cve.now/CVE-2006-0983.md): Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2006-0984](https://cve.now/CVE-2006-0984.md): Cross-site scripting (XSS) vulnerability in inc\_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-0985](https://cve.now/CVE-2006-0985.md): Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier allow remote attacker (no CVSS) - [CVE-2006-0986](https://cve.now/CVE-2006-0986.md): WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) tem (no CVSS) - [CVE-2006-0987](https://cve.now/CVE-2006-0987.md): The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides addit (no CVSS) - [CVE-2006-0988](https://cve.now/CVE-2006-0988.md): The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-03-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.