# CVEs published 2006-03-24

20 CVEs were published on March 24, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1388](https://cve.now/CVE-2006-1388.md): Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors. (no CVSS)
- [CVE-2002-2209](https://cve.now/CVE-2002-2209.md): Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors. (no CVSS)
- [CVE-2003-1299](https://cve.now/CVE-2003-1299.md): Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users (no CVSS)
- [CVE-2003-1300](https://cve.now/CVE-2003-1300.md): Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denial of service via a l (no CVSS)
- [CVE-2006-0816](https://cve.now/CVE-2006-0816.md): Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (no CVSS)
- [CVE-2006-1379](https://cve.now/CVE-2006-1379.md): Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users t (no CVSS)
- [CVE-2006-1380](https://cve.now/CVE-2006-1380.md): ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, us (no CVSS)
- [CVE-2006-1381](https://cve.now/CVE-2006-1381.md): Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain (no CVSS)
- [CVE-2006-1382](https://cve.now/CVE-2006-1382.md): PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register\_globals is disabled, allows rem (no CVSS)
- [CVE-2006-1383](https://cve.now/CVE-2006-1383.md): Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outsid (no CVSS)
- [CVE-2006-1384](https://cve.now/CVE-2006-1384.md): Cross-site scripting (XSS) vulnerability in apwc\_win\_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0. (no CVSS)
- [CVE-2006-1385](https://cve.now/CVE-2006-1385.md): Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute a (no CVSS)
- [CVE-2005-2711](https://cve.now/CVE-2005-2711.md): ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop (no CVSS)
- [CVE-2006-1372](https://cve.now/CVE-2006-1372.md): Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2006-1373](https://cve.now/CVE-2006-1373.md): Cross-site scripting (XSS) vulnerability in status\_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1374](https://cve.now/CVE-2006-1374.md): SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-1375](https://cve.now/CVE-2006-1375.md): AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (no CVSS)
- [CVE-2006-1376](https://cve.now/CVE-2006-1376.md): The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permis (no CVSS)
- [CVE-2006-1377](https://cve.now/CVE-2006-1377.md): Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-1378](https://cve.now/CVE-2006-1378.md): PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.