# CVEs published 2006-03-29

22 CVEs were published on March 29, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0459](https://cve.now/CVE-2006-0459.md): flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars c (no CVSS)
- [CVE-2006-1491](https://cve.now/CVE-2006-1491.md): Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execu (no CVSS)
- [CVE-2006-1492](https://cve.now/CVE-2006-1492.md): Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter. (no CVSS)
- [CVE-2006-1493](https://cve.now/CVE-2006-1493.md): Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the ch (no CVSS)
- [CVE-2006-1490](https://cve.now/CVE-2006-1490.md): PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user (no CVSS)
- [CVE-2006-1489](https://cve.now/CVE-2006-1489.md): Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-1486](https://cve.now/CVE-2006-1486.md): Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1487](https://cve.now/CVE-2006-1487.md): Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1488](https://cve.now/CVE-2006-1488.md): ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters (no CVSS)
- [CVE-1999-1587](https://cve.now/CVE-1999-1587.md): /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and valu (no CVSS)
- [CVE-2006-1474](https://cve.now/CVE-2006-1474.md): Cross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote attackers to inject a (no CVSS)
- [CVE-2006-1475](https://cve.now/CVE-2006-1475.md): Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Da (no CVSS)
- [CVE-2006-1476](https://cve.now/CVE-2006-1476.md): Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" (with no ch (no CVSS)
- [CVE-2006-1477](https://cve.now/CVE-2006-1477.md): Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute ar (no CVSS)
- [CVE-2006-1478](https://cve.now/CVE-2006-1478.md): Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possi (no CVSS)
- [CVE-2006-1479](https://cve.now/CVE-2006-1479.md): Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbi (no CVSS)
- [CVE-2006-1480](https://cve.now/CVE-2006-1480.md): Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by ( (no CVSS)
- [CVE-2006-1481](https://cve.now/CVE-2006-1481.md): SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain (no CVSS)
- [CVE-2006-1482](https://cve.now/CVE-2006-1482.md): Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-1483](https://cve.now/CVE-2006-1483.md): Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (no CVSS)
- [CVE-2006-1484](https://cve.now/CVE-2006-1484.md): Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by opening arbitrary files (no CVSS)
- [CVE-2006-1485](https://cve.now/CVE-2006-1485.md): gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary programs by uploading files (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.