1.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2006-08-16	CVE-2006-4161	Directory Traversal vulnerability in XennoBB Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. network low complexity xennobb	5.0
2006-06-27	CVE-2006-3241	Cross-Site Scripting vulnerability in XennoBB Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter. network high complexity xennobb	2.6