# CVEs published 2006-03-28

42 CVEs were published on March 28, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1431](https://cve.now/CVE-2006-1431.md): Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1432](https://cve.now/CVE-2006-1432.md): fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid va (no CVSS)
- [CVE-2006-1430](https://cve.now/CVE-2006-1430.md): Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arb (no CVSS)
- [CVE-2006-1413](https://cve.now/CVE-2006-1413.md): Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-1414](https://cve.now/CVE-2006-1414.md): Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-1415](https://cve.now/CVE-2006-1415.md): Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-1416](https://cve.now/CVE-2006-1416.md): Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject ar (no CVSS)
- [CVE-2006-1417](https://cve.now/CVE-2006-1417.md): Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote at (no CVSS)
- [CVE-2006-1418](https://cve.now/CVE-2006-1418.md): Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attacke (no CVSS)
- [CVE-2006-1419](https://cve.now/CVE-2006-1419.md): SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-1420](https://cve.now/CVE-2006-1420.md): SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid paramet (no CVSS)
- [CVE-2006-1421](https://cve.now/CVE-2006-1421.md): Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic\_quotes\_gpc disabled, allow remote at (no CVSS)
- [CVE-2006-1422](https://cve.now/CVE-2006-1422.md): SQL injection vulnerability in details\_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-1423](https://cve.now/CVE-2006-1423.md): SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arb (no CVSS)
- [CVE-2006-1425](https://cve.now/CVE-2006-1425.md): Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-1426](https://cve.now/CVE-2006-1426.md): Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parame (no CVSS)
- [CVE-2006-1427](https://cve.now/CVE-2006-1427.md): Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1428](https://cve.now/CVE-2006-1428.md): Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-1429](https://cve.now/CVE-2006-1429.md): Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2005-4744](https://cve.now/CVE-2005-4744.md): Off-by-one error in the sql\_error function in sql\_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might all (no CVSS)
- [CVE-2005-4745](https://cve.now/CVE-2005-4745.md): SQL injection vulnerability in the rlm\_sqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2005-4746](https://cve.now/CVE-2005-4746.md): Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service (crash) via (1) the rlm\_sqlcounter (no CVSS)
- [CVE-2005-4747](https://cve.now/CVE-2005-4747.md): Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1397](https://cve.now/CVE-2006-1397.md): Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2006-1398](https://cve.now/CVE-2006-1398.md): Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-1399](https://cve.now/CVE-2006-1399.md): Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-1400](https://cve.now/CVE-2006-1400.md): Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to (no CVSS)
- [CVE-2006-1401](https://cve.now/CVE-2006-1401.md): Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-1402](https://cve.now/CVE-2006-1402.md): Buffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1) cause a denial of service via a long nickname (no CVSS)
- [CVE-2006-1403](https://cve.now/CVE-2006-1403.md): Format string vulnerability in the PrintString function in c\_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attack (no CVSS)
- [CVE-2006-1404](https://cve.now/CVE-2006-1404.md): Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-1405](https://cve.now/CVE-2006-1405.md): Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote (no CVSS)
- [CVE-2006-1406](https://cve.now/CVE-2006-1406.md): Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-1407](https://cve.now/CVE-2006-1407.md): Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject ar (no CVSS)
- [CVE-2006-1408](https://cve.now/CVE-2006-1408.md): Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via (1) a packet with no data or (2) a large (no CVSS)
- [CVE-2006-1409](https://cve.now/CVE-2006-1409.md): Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (application crash) via an invalid comprLe (no CVSS)
- [CVE-2006-1410](https://cve.now/CVE-2006-1410.md): Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbit (no CVSS)
- [CVE-2006-1411](https://cve.now/CVE-2006-1411.md): Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1412](https://cve.now/CVE-2006-1412.md): TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (no CVSS)
- [CVE-2006-0989](https://cve.now/CVE-2006-0989.md): Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and Bus (no CVSS)
- [CVE-2006-0990](https://cve.now/CVE-2006-0990.md): Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter an (no CVSS)
- [CVE-2006-0991](https://cve.now/CVE-2006-0991.md): Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to exe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.