TI-2006-02902 CVE-2006-2997 · GHSA-frh2-8rpm-pcfjCross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is…Priority LOW 17Cross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field.CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0203 · Published 2006-06-13 · No fix listed