# CVEs published 2006-04-29 28 CVEs were published on April 29, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2004-2659](https://cve.now/CVE-2004-2659.md): Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to… (no CVSS) - [CVE-2005-4792](https://cve.now/CVE-2005-4792.md): SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute… (no CVSS) - [CVE-2005-4793](https://cve.now/CVE-2005-4793.md): Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager… (no CVSS) - [CVE-2006-2084](https://cve.now/CVE-2006-2084.md): Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-2085](https://cve.now/CVE-2006-2085.md): Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build… (no CVSS) - [CVE-2006-2086](https://cve.now/CVE-2006-2086.md): Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE… (no CVSS) - [CVE-2006-2087](https://cve.now/CVE-2006-2087.md): The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or… (no CVSS) - [CVE-2006-2088](https://cve.now/CVE-2006-2088.md): Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject… (no CVSS) - [CVE-2006-2089](https://cve.now/CVE-2006-2089.md): Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script… (no CVSS) - [CVE-2006-2090](https://cve.now/CVE-2006-2090.md): Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS) - [CVE-2006-2091](https://cve.now/CVE-2006-2091.md): admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows remote attackers to obtain sensitive information via an invalid… (no CVSS) - [CVE-2006-2092](https://cve.now/CVE-2006-2092.md): Unspecified vulnerability in HP StorageWorks Secure Path for Windows 4.0C-SP2 before 20060419 allows remote attackers to cause an… (no CVSS) - [CVE-2006-2093](https://cve.now/CVE-2006-2093.md): Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL… (no CVSS) - [CVE-2006-2094](https://cve.now/CVE-2006-2094.md): Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security… (no CVSS) - [CVE-2006-2095](https://cve.now/CVE-2006-2095.md): Phex before 2.8.6 allows remote attackers to cause a denial of service (application hang) by initiating multiple chat requests to a single… (no CVSS) - [CVE-2006-2096](https://cve.now/CVE-2006-2096.md): plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2)… (no CVSS) - [CVE-2006-2097](https://cve.now/CVE-2006-2097.md): SQL injection vulnerability in func\_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2006-2098](https://cve.now/CVE-2006-2098.md): PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary PHP code via (1)… (no CVSS) - [CVE-2006-2099](https://cve.now/CVE-2006-2099.md): Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2100](https://cve.now/CVE-2006-2100.md): Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2101](https://cve.now/CVE-2006-2101.md): Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2102](https://cve.now/CVE-2006-2102.md): Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2103](https://cve.now/CVE-2006-2103.md): SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands… (no CVSS) - [CVE-2006-2104](https://cve.now/CVE-2006-2104.md): Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attackers to inject… (no CVSS) - [CVE-2006-2105](https://cve.now/CVE-2006-2105.md): Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".."… (no CVSS) - [CVE-2006-2106](https://cve.now/CVE-2006-2106.md): Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-2107](https://cve.now/CVE-2006-2107.md): Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary… (no CVSS) - [CVE-2006-2108](https://cve.now/CVE-2006-2108.md): parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a long request… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-04-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.