# CVEs published 2006-02-02

28 CVEs were published on February 2, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0299](https://cve.now/CVE-2006-0299.md): The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes… (no CVSS)
- [CVE-2006-0297](https://cve.now/CVE-2006-0297.md): Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow… (no CVSS)
- [CVE-2006-0298](https://cve.now/CVE-2006-0298.md): The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and… (no CVSS)
- [CVE-2006-0292](https://cve.now/CVE-2006-0292.md): The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote… (no CVSS)
- [CVE-2006-0293](https://cve.now/CVE-2006-0293.md): The function allocation code (js\_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption)… (no CVSS)
- [CVE-2006-0294](https://cve.now/CVE-2006-0294.md): Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute… (no CVSS)
- [CVE-2006-0295](https://cve.now/CVE-2006-0295.md): Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute… (no CVSS)
- [CVE-2006-0296](https://cve.now/CVE-2006-0296.md): The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which… (no CVSS)
- [CVE-2006-0529](https://cve.now/CVE-2006-0529.md): Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220\_16 and 1.11 Build 29\_20, as used in multiple CA products… (no CVSS)
- [CVE-2006-0530](https://cve.now/CVE-2006-0530.md): Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220\_16 and 1.11 Build 29\_20, as used in multiple CA products… (no CVSS)
- [CVE-2003-1292](https://cve.now/CVE-2003-1292.md): PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files… (no CVSS)
- [CVE-2005-4708](https://cve.now/CVE-2005-4708.md): Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service… (no CVSS)
- [CVE-2005-4709](https://cve.now/CVE-2005-4709.md): The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal… (no CVSS)
- [CVE-2006-0433](https://cve.now/CVE-2006-0433.md): Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is… (no CVSS)
- [CVE-2006-0512](https://cve.now/CVE-2006-0512.md): PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on… (no CVSS)
- [CVE-2006-0516](https://cve.now/CVE-2006-0516.md): Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause… (no CVSS)
- [CVE-2006-0517](https://cve.now/CVE-2006-0517.md): Multiple SQL injection vulnerabilities in formulaires/inc-formulaire\_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and… (no CVSS)
- [CVE-2006-0518](https://cve.now/CVE-2006-0518.md): Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote… (no CVSS)
- [CVE-2006-0519](https://cve.now/CVE-2006-0519.md): SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request… (no CVSS)
- [CVE-2006-0520](https://cve.now/CVE-2006-0520.md): SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute… (no CVSS)
- [CVE-2006-0521](https://cve.now/CVE-2006-0521.md): Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-0522](https://cve.now/CVE-2006-0522.md): SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier… (no CVSS)
- [CVE-2006-0523](https://cve.now/CVE-2006-0523.md): SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-0524](https://cve.now/CVE-2006-0524.md): Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-0525](https://cve.now/CVE-2006-0525.md): Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and… (no CVSS)
- [CVE-2006-0526](https://cve.now/CVE-2006-0526.md): The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a… (no CVSS)
- [CVE-2006-0527](https://cve.now/CVE-2006-0527.md): BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a… (no CVSS)
- [CVE-2006-0528](https://cve.now/CVE-2006-0528.md): The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-02-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.