CVE-2006-2265: Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote att...

Security readout for executives and security teams

This is an old reported cross-site scripting issue in Ocean12 Calendar Manager Pro 1.00. A remote attacker could make the application return attacker-controlled script or HTML through a date field. The source record warns that provenance is unknown, so exposure should be verified before prioritizing major work. Exposure is most likely limited to legacy ASP sites still running Ocean12 Calendar Manager Pro 1.00, especially where admin/main.asp is reachable from untrusted networks. Verify whether this legacy product exists in the environment. If present and externally reachable, treat remediation as a near-term web application risk; otherwise track as low operational priority. Mitigation focus: Check vendor or archived product guidance for any official fix.; Remove or replace Ocean12 Calendar Manager Pro 1.00 if unsupported.; Restrict access to admin/main.asp to trusted networks and administrators..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.