# CVEs published 2006-03-15

12 CVEs were published on March 15, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1244](https://cve.now/CVE-2006-1244.md): Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) (no CVSS)
- [CVE-2000-1239](https://cve.now/CVE-2000-1239.md): The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http\_disable to zero at instal (no CVSS)
- [CVE-2005-4731](https://cve.now/CVE-2005-4731.md): The Next action in PEAR HTML\_QuickForm\_Controller 1.0.4 includes the SID in the URL even when session.use\_only\_cookies is configured, which (no CVSS)
- [CVE-2006-1240](https://cve.now/CVE-2006-1240.md): Buffer overflow in inet\_server.cpp in (1) fb\_inet\_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a (no CVSS)
- [CVE-2006-1241](https://cve.now/CVE-2006-1241.md): Firebird 1.5.2.4731 installs (1) fb\_lock\_mgr, (2) gds\_drop, and (3) fb\_inet\_server with setuid firebird permissions, which might allow local (no CVSS)
- [CVE-2006-1242](https://cve.now/CVE-2006-1242.md): The ip\_push\_pending\_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving uns (no CVSS)
- [CVE-2006-1243](https://cve.now/CVE-2006-1243.md): Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execu (no CVSS)
- [CVE-2006-0024](https://cve.now/CVE-2006-0024.md): Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2006-1237](https://cve.now/CVE-2006-1237.md): Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic\_quotes\_gpc disabled, allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-1238](https://cve.now/CVE-2006-1238.md): SQL injection vulnerability in DSLogin 1.0, with magic\_quotes\_gpc disabled, allows remote attackers to execute arbitrary SQL commands and by (no CVSS)
- [CVE-2006-1239](https://cve.now/CVE-2006-1239.md): Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2006-1236](https://cve.now/CVE-2006-1236.md): Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long se (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.