# CVEs published 2006-03-21 22 CVEs were published on March 21, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-1342](https://cve.now/CVE-2006-1342.md): net/ipv4/af\_inet.c in Linux kernel 2.4 does not clear sockaddr\_in.sin\_zero before returning IPv4 socket names from the (1) getsockname, (2) (no CVSS) - [CVE-2006-1343](https://cve.now/CVE-2006-1343.md): net/ipv4/netfilter/ip\_conntrack\_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf\_conntrack\_l3proto\_ipv4.c in 2.6, does (no CVSS) - [CVE-2006-0745](https://cve.now/CVE-2006-0745.md): X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the (no CVSS) - [CVE-2006-1336](https://cve.now/CVE-2006-1336.md): Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inje (no CVSS) - [CVE-2006-1337](https://cve.now/CVE-2006-1337.md): Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edi (no CVSS) - [CVE-2006-1338](https://cve.now/CVE-2006-1338.md): Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of servi (no CVSS) - [CVE-2006-1339](https://cve.now/CVE-2006-1339.md): Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register\_globals is enabled, (no CVSS) - [CVE-2006-1340](https://cve.now/CVE-2006-1340.md): CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an inva (no CVSS) - [CVE-2006-1341](https://cve.now/CVE-2006-1341.md): SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) month an (no CVSS) - [CVE-2006-1061](https://cve.now/CVE-2006-1061.md): Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (t (no CVSS) - [CVE-2006-1324](https://cve.now/CVE-2006-1324.md): Cross-site scripting (XSS) vulnerability in acp/lib/class\_db\_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to injec (no CVSS) - [CVE-2006-1325](https://cve.now/CVE-2006-1325.md): Cross-site scripting (XSS) vulnerability in Streber 0.055 allows remote attackers to inject arbitrary web script or HTML via unknown attack (no CVSS) - [CVE-2006-1326](https://cve.now/CVE-2006-1326.md): Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2006-1327](https://cve.now/CVE-2006-1327.md): SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter. (no CVSS) - [CVE-2006-1328](https://cve.now/CVE-2006-1328.md): SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitra (no CVSS) - [CVE-2006-1329](https://cve.now/CVE-2006-1329.md): The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending (no CVSS) - [CVE-2006-1330](https://cve.now/CVE-2006-1330.md): Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid p (no CVSS) - [CVE-2006-1331](https://cve.now/CVE-2006-1331.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbi (no CVSS) - [CVE-2006-1332](https://cve.now/CVE-2006-1332.md): Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails (no CVSS) - [CVE-2006-1333](https://cve.now/CVE-2006-1333.md): Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-1334](https://cve.now/CVE-2006-1334.md): Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2 (no CVSS) - [CVE-2006-1335](https://cve.now/CVE-2006-1335.md): gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-03-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.