# CVEs published 2006-03-31

16 CVEs were published on March 31, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0052](https://cve.now/CVE-2006-0052.md): The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to (no CVSS)
- [CVE-2006-1552](https://cve.now/CVE-2006-1552.md): Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted J (no CVSS)
- [CVE-2006-1553](https://cve.now/CVE-2006-1553.md): SQL injection vulnerability in functions/final\_functions.php in VSNS Lemon 3.2.0, with magic\_quotes\_gpc disabled, allows remote attackers to (no CVSS)
- [CVE-2006-1554](https://cve.now/CVE-2006-1554.md): Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name par (no CVSS)
- [CVE-2006-1555](https://cve.now/CVE-2006-1555.md): VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsns\[topic\_id\] cooki (no CVSS)
- [CVE-2006-1556](https://cve.now/CVE-2006-1556.md): Multiple cross-site scripting (XSS) vulnerabilities in view\_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-1557](https://cve.now/CVE-2006-1557.md): Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) in (no CVSS)
- [CVE-2006-1558](https://cve.now/CVE-2006-1558.md): Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-1559](https://cve.now/CVE-2006-1559.md): SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. (no CVSS)
- [CVE-2006-1560](https://cve.now/CVE-2006-1560.md): Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecif (no CVSS)
- [CVE-2006-1561](https://cve.now/CVE-2006-1561.md): SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) \[V\]Book (aka VBook) 2.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2006-1562](https://cve.now/CVE-2006-1562.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) \[V\]Book (aka VBook) 2.0 allow remote atta (no CVSS)
- [CVE-2006-1563](https://cve.now/CVE-2006-1563.md): Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) \[V\]Book (aka VBook) 2.0 allows remote administrat (no CVSS)
- [CVE-2006-1564](https://cve.now/CVE-2006-1564.md): Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn di (no CVSS)
- [CVE-2006-1565](https://cve.now/CVE-2006-1565.md): Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for (no CVSS)
- [CVE-2006-1566](https://cve.now/CVE-2006-1566.md): Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.