Inhouse Associates Ia-calendar — known CVE vulnerabilities

Every CVE whose affected-product data names Inhouse Associates Ia-calendar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2006-2292 — CVSS 6.4 (medium): Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the (1) type parameter…
• CVE-2006-2291 — CVSS 5.8 (medium): Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML…