EUVD-2005-3979

Malware in sbrugna...

CVE-2006-2247

WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2005-3982

CVE-2005-3982 is a CRLF injection vulnerability in WebCalendar 1.0.1 (layers_toggle.php) that can allow remote attackers to modify HTTP headers and perform HTTP response splitting via the ret parameter used for redirects. Debian advisory DSA-1002-1 notes multiple issues in webcalendar and provide...