# CVEs published 2006-05-04 29 CVEs were published on May 4, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2202](https://cve.now/CVE-2006-2202.md): SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album… (no CVSS) - [CVE-2006-2201](https://cve.now/CVE-2006-2201.md): Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP… (no CVSS) - [CVE-2006-2163](https://cve.now/CVE-2006-2163.md): Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-2164](https://cve.now/CVE-2006-2164.md): Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2006-2165](https://cve.now/CVE-2006-2165.md): Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary… (no CVSS) - [CVE-2006-2166](https://cve.now/CVE-2006-2166.md): Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE… (no CVSS) - [CVE-2006-2167](https://cve.now/CVE-2006-2167.md): Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject… (no CVSS) - [CVE-2006-2168](https://cve.now/CVE-2006-2168.md): FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1. (no CVSS) - [CVE-2006-2169](https://cve.now/CVE-2006-2169.md): RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which… (no CVSS) - [CVE-2006-2170](https://cve.now/CVE-2006-2170.md): Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as… (no CVSS) - [CVE-2006-2171](https://cve.now/CVE-2006-2171.md): Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the… (no CVSS) - [CVE-2006-2172](https://cve.now/CVE-2006-2172.md): Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) and possibly execute… (no CVSS) - [CVE-2006-2173](https://cve.now/CVE-2006-2173.md): Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute… (no CVSS) - [CVE-2006-2174](https://cve.now/CVE-2006-2174.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/server\_day\_stats.php in Virtual Hosting Control System (VHCS) allow remote… (no CVSS) - [CVE-2006-2175](https://cve.now/CVE-2006-2175.md): PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code… (no CVSS) - [CVE-2006-2176](https://cve.now/CVE-2006-2176.md): Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-2177](https://cve.now/CVE-2006-2177.md): Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2006-2178](https://cve.now/CVE-2006-2178.md): Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the… (no CVSS) - [CVE-2006-2179](https://cve.now/CVE-2006-2179.md): Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID… (no CVSS) - [CVE-2006-2180](https://cve.now/CVE-2006-2180.md): Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute… (no CVSS) - [CVE-2006-2181](https://cve.now/CVE-2006-2181.md): Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script… (no CVSS) - [CVE-2006-2182](https://cve.now/CVE-2006-2182.md): Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow… (no CVSS) - [CVE-2006-2183](https://cve.now/CVE-2006-2183.md): Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands… (no CVSS) - [CVE-2006-2184](https://cve.now/CVE-2006-2184.md): Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2006-2186](https://cve.now/CVE-2006-2186.md): zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1)… (no CVSS) - [CVE-2006-2187](https://cve.now/CVE-2006-2187.md): Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-2188](https://cve.now/CVE-2006-2188.md): Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2006-2189](https://cve.now/CVE-2006-2189.md): SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword… (no CVSS) - [CVE-2006-2190](https://cve.now/CVE-2006-2190.md): Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-05-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.