CVE-2006-4825: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in clfiles/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 ti, 2 bi, or 3 cbgi parameters...