# CVEs published 2007-02-24 23 CVEs were published on February 24, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2006-7057](https://cve.now/CVE-2006-7057.md): SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the categor (no CVSS) - [CVE-2006-7058](https://cve.now/CVE-2006-7058.md): Multiple cross-site scripting (XSS) vulnerabilities in Sphider before 1.3.1c allow remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2006-7059](https://cve.now/CVE-2006-7059.md): Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2006-7060](https://cve.now/CVE-2006-7060.md): cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, (no CVSS) - [CVE-2006-7061](https://cve.now/CVE-2006-7061.md): Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which a (no CVSS) - [CVE-2006-7062](https://cve.now/CVE-2006-7062.md): calendar.php in Kamgaing Email System (kmail) 2.3 and earlier allows remote attackers to obtain the full path of the server via an invalid d (no CVSS) - [CVE-2006-7063](https://cve.now/CVE-2006-7063.md): Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary fi (no CVSS) - [CVE-2006-7064](https://cve.now/CVE-2006-7064.md): Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inje (no CVSS) - [CVE-2006-7042](https://cve.now/CVE-2006-7042.md): Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-7043](https://cve.now/CVE-2006-7043.md): Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or H (no CVSS) - [CVE-2006-7044](https://cve.now/CVE-2006-7044.md): PHP remote file inclusion vulnerability in comment.core.inc.php in Clan Manager Pro (CMPRO) 1.11 and earlier allows remote attackers to exec (no CVSS) - [CVE-2006-7045](https://cve.now/CVE-2006-7045.md): PHP remote file inclusion vulnerability in Clan Manager Pro (CMPRO) 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-7046](https://cve.now/CVE-2006-7046.md): PHP remote file inclusion vulnerability in cmpro.intern/login.inc.php for Clan Manager Pro (CMPRO) 1.1.0 allows remote attackers to execute (no CVSS) - [CVE-2006-7047](https://cve.now/CVE-2006-7047.md): include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alt (no CVSS) - [CVE-2006-7048](https://cve.now/CVE-2006-7048.md): Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS) - [CVE-2006-7049](https://cve.now/CVE-2006-7049.md): The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allow (no CVSS) - [CVE-2006-7050](https://cve.now/CVE-2006-7050.md): Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (no CVSS) - [CVE-2006-7051](https://cve.now/CVE-2006-7051.md): The sys\_timer\_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) (no CVSS) - [CVE-2006-7052](https://cve.now/CVE-2006-7052.md): Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to execute arbitrary co (no CVSS) - [CVE-2006-7053](https://cve.now/CVE-2006-7053.md): Unspecified vulnerability in Arkoon FAST360 UTM appliances 3.0 through 3.0/29, 3.1, 3.2, and 3.3 allows remote attackers to bypass keyword f (no CVSS) - [CVE-2006-7054](https://cve.now/CVE-2006-7054.md): The DNS module in Arkoon FAST360 UTM appliances 3.0 up to 3.0/29, 3.1 through 3.3, and 4.0 allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2006-7055](https://cve.now/CVE-2006-7055.md): PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2006-7056](https://cve.now/CVE-2006-7056.md): Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP co (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-02-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.