# CVEs published 2006-03-14

50 CVEs were published on March 14, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0009](https://cve.now/CVE-2006-0009.md): Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary c (no CVSS)
- [CVE-2006-0028](https://cve.now/CVE-2006-0028.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att (no CVSS)
- [CVE-2006-0029](https://cve.now/CVE-2006-0029.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att (no CVSS)
- [CVE-2006-0030](https://cve.now/CVE-2006-0030.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att (no CVSS)
- [CVE-2006-0031](https://cve.now/CVE-2006-0031.md): Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted a (no CVSS)
- [CVE-2006-1235](https://cve.now/CVE-2006-1235.md): Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only (no CVSS)
- [CVE-2005-4730](https://cve.now/CVE-2005-4730.md): Unspecified vulnerability in PEAR Text\_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random nu (no CVSS)
- [CVE-2006-1225](https://cve.now/CVE-2006-1225.md): CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mai (no CVSS)
- [CVE-2006-1226](https://cve.now/CVE-2006-1226.md): Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-1227](https://cve.now/CVE-2006-1227.md): Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the (no CVSS)
- [CVE-2006-1228](https://cve.now/CVE-2006-1228.md): Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a (no CVSS)
- [CVE-2006-1229](https://cve.now/CVE-2006-1229.md): SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2006-1230](https://cve.now/CVE-2006-1230.md): Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1231](https://cve.now/CVE-2006-1231.md): CAPI4HylaFAX 1.3, when compiled with GENERATE\_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the (no CVSS)
- [CVE-2006-1232](https://cve.now/CVE-2006-1232.md): Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic\_quotes\_gpc disabled, allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-1233](https://cve.now/CVE-2006-1233.md): Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtC (no CVSS)
- [CVE-2006-1234](https://cve.now/CVE-2006-1234.md): SQL injection vulnerability in index.php in DSCounter 1.2, with magic\_quotes\_gpc disabled, allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-0396](https://cve.now/CVE-2006-0396.md): Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute (no CVSS)
- [CVE-2006-0397](https://cve.now/CVE-2006-0397.md): Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i (no CVSS)
- [CVE-2006-0398](https://cve.now/CVE-2006-0398.md): Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i (no CVSS)
- [CVE-2006-0399](https://cve.now/CVE-2006-0399.md): Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i (no CVSS)
- [CVE-2006-0400](https://cve.now/CVE-2006-0400.md): CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domai (no CVSS)
- [CVE-2006-1221](https://cve.now/CVE-2006-1221.md): Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm (no CVSS)
- [CVE-2006-1222](https://cve.now/CVE-2006-1222.md): Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-1223](https://cve.now/CVE-2006-1223.md): Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1224](https://cve.now/CVE-2006-1224.md): Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed enco (no CVSS)
- [CVE-2006-0457](https://cve.now/CVE-2006-0457.md): Race condition in the (1) add\_key, (2) request\_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of s (no CVSS)
- [CVE-2006-1215](https://cve.now/CVE-2006-1215.md): Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-1216](https://cve.now/CVE-2006-1216.md): Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-1217](https://cve.now/CVE-2006-1217.md): SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results. (no CVSS)
- [CVE-2006-1218](https://cve.now/CVE-2006-1218.md): Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CP (no CVSS)
- [CVE-2006-1219](https://cve.now/CVE-2006-1219.md): Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files (no CVSS)
- [CVE-2006-1220](https://cve.now/CVE-2006-1220.md): Integer overflow in the mach\_msg\_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown atta (no CVSS)
- [CVE-2006-1198](https://cve.now/CVE-2006-1198.md): Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\\prc registry value, for which all users hav (no CVSS)
- [CVE-2006-1199](https://cve.now/CVE-2006-1199.md): Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1200](https://cve.now/CVE-2006-1200.md): Direct static code injection vulnerability in add\_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via t (no CVSS)
- [CVE-2006-1201](https://cve.now/CVE-2006-1201.md): Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, al (no CVSS)
- [CVE-2006-1202](https://cve.now/CVE-2006-1202.md): Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2006-1203](https://cve.now/CVE-2006-1203.md): PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitra (no CVSS)
- [CVE-2006-1204](https://cve.now/CVE-2006-1204.md): Multiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1205](https://cve.now/CVE-2006-1205.md): Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-1206](https://cve.now/CVE-2006-1206.md): Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remot (no CVSS)
- [CVE-2006-1207](https://cve.now/CVE-2006-1207.md): PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each (no CVSS)
- [CVE-2006-1208](https://cve.now/CVE-2006-1208.md): Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li ext (no CVSS)
- [CVE-2006-1209](https://cve.now/CVE-2006-1209.md): PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficien (no CVSS)
- [CVE-2006-1210](https://cve.now/CVE-2006-1210.md): The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body. (no CVSS)
- [CVE-2006-1211](https://cve.now/CVE-2006-1211.md): IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns datab (no CVSS)
- [CVE-2006-1212](https://cve.now/CVE-2006-1212.md): Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, (no CVSS)
- [CVE-2006-1213](https://cve.now/CVE-2006-1213.md): JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges v (no CVSS)
- [CVE-2006-1214](https://cve.now/CVE-2006-1214.md): UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.