# CVEs published 2006-02-24

21 CVEs were published on February 24, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0884](https://cve.now/CVE-2006-0884.md): The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass… (no CVSS)
- [CVE-2004-2654](https://cve.now/CVE-2004-2654.md): The clientAbortBody function in client\_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2006-0813](https://cve.now/CVE-2006-0813.md): Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ… (no CVSS)
- [CVE-2006-0871](https://cve.now/CVE-2006-0871.md): Directory traversal vulnerability in the \_setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote… (no CVSS)
- [CVE-2006-0872](https://cve.now/CVE-2006-0872.md): Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include… (no CVSS)
- [CVE-2006-0873](https://cve.now/CVE-2006-0873.md): Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to… (no CVSS)
- [CVE-2006-0874](https://cve.now/CVE-2006-0874.md): Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, as addressed by… (no CVSS)
- [CVE-2006-0875](https://cve.now/CVE-2006-0875.md): Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2006-0876](https://cve.now/CVE-2006-0876.md): POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving character… (no CVSS)
- [CVE-2006-0877](https://cve.now/CVE-2006-0877.md): Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable. (no CVSS)
- [CVE-2006-0878](https://cve.now/CVE-2006-0878.md): Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by… (no CVSS)
- [CVE-2006-0879](https://cve.now/CVE-2006-0879.md): SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-0880](https://cve.now/CVE-2006-0880.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-0881](https://cve.now/CVE-2006-0881.md): Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register\_globals is enabled, allow… (no CVSS)
- [CVE-2006-0882](https://cve.now/CVE-2006-0882.md): Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via… (no CVSS)
- [CVE-2005-2934](https://cve.now/CVE-2005-2934.md): Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2005-3630](https://cve.now/CVE-2005-3630.md): Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an… (no CVSS)
- [CVE-2006-0188](https://cve.now/CVE-2006-0188.md): webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the… (no CVSS)
- [CVE-2006-0195](https://cve.now/CVE-2006-0195.md): Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting… (no CVSS)
- [CVE-2006-0300](https://cve.now/CVE-2006-0300.md): Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly… (no CVSS)
- [CVE-2006-0377](https://cve.now/CVE-2006-0377.md): CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.