1.0.5

DATE	CVE	VULNERABILITY TITLE	RISK
2006-08-21	CVE-2006-4279	SQL Injection vulnerability in XennoBB Icon_Topic SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the icon_topic parameter. network low complexity xennobb	7.5
2006-08-16	CVE-2006-4161	Directory Traversal vulnerability in XennoBB Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. network low complexity xennobb	5.0
2006-06-27	CVE-2006-3241	Cross-Site Scripting vulnerability in XennoBB Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter. network high complexity xennobb	2.6