# CVEs published 2006-01-22 24 CVEs were published on January 22, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0354](https://cve.now/CVE-2006-0354.md): Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service… (no CVSS) - [CVE-2006-0355](https://cve.now/CVE-2006-0355.md): Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command… (no CVSS) - [CVE-2006-0356](https://cve.now/CVE-2006-0356.md): Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined… (no CVSS) - [CVE-2006-0357](https://cve.now/CVE-2006-0357.md): Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service… (no CVSS) - [CVE-2006-0358](https://cve.now/CVE-2006-0358.md): Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-0359](https://cve.now/CVE-2006-0359.md): Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP… (no CVSS) - [CVE-2006-0360](https://cve.now/CVE-2006-0360.md): MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service… (no CVSS) - [CVE-2006-0361](https://cve.now/CVE-2006-0361.md): Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2006-0362](https://cve.now/CVE-2006-0362.md): TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a… (no CVSS) - [CVE-2006-0363](https://cve.now/CVE-2006-0363.md): The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the… (no CVSS) - [CVE-2006-0364](https://cve.now/CVE-2006-0364.md): Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a… (no CVSS) - [CVE-2006-0365](https://cve.now/CVE-2006-0365.md): Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2006-0366](https://cve.now/CVE-2006-0366.md): Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a… (no CVSS) - [CVE-2006-0367](https://cve.now/CVE-2006-0367.md): Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2… (no CVSS) - [CVE-2006-0368](https://cve.now/CVE-2006-0368.md): Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1)… (no CVSS) - [CVE-2006-0369](https://cve.now/CVE-2006-0369.md): MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT \* FROM information\_schema.views;"… (no CVSS) - [CVE-2006-0370](https://cve.now/CVE-2006-0370.md): Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote… (no CVSS) - [CVE-2006-0371](https://cve.now/CVE-2006-0371.md): Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly… (no CVSS) - [CVE-2006-0372](https://cve.now/CVE-2006-0372.md): Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary… (no CVSS) - [CVE-2006-0373](https://cve.now/CVE-2006-0373.md): Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2006-0374](https://cve.now/CVE-2006-0374.md): Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which… (no CVSS) - [CVE-2006-0375](https://cve.now/CVE-2006-0375.md): Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol… (no CVSS) - [CVE-2006-0376](https://cve.now/CVE-2006-0376.md): The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user… (no CVSS) - [CVE-2006-0353](https://cve.now/CVE-2006-0353.md): unix\_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-01-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.