# CVEs published 2006-06-29

28 CVEs were published on June 29, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1467](https://cve.now/CVE-2006-1467.md): Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows… (no CVSS)
- [CVE-2006-3115](https://cve.now/CVE-2006-3115.md): SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-3116](https://cve.now/CVE-2006-3116.md): Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL… (no CVSS)
- [CVE-2006-3316](https://cve.now/CVE-2006-3316.md): Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the… (no CVSS)
- [CVE-2006-3317](https://cve.now/CVE-2006-3317.md): PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid\_dir… (no CVSS)
- [CVE-2006-3318](https://cve.now/CVE-2006-3318.md): SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when the authorization type is phpraid, allows… (no CVSS)
- [CVE-2006-3312](https://cve.now/CVE-2006-3312.md): Multiple cross-site scripting (XSS) vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and earlier allow remote attackers to inject… (no CVSS)
- [CVE-2006-3313](https://cve.now/CVE-2006-3313.md): Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-3314](https://cve.now/CVE-2006-3314.md): PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to… (no CVSS)
- [CVE-2006-3315](https://cve.now/CVE-2006-3315.md): PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to… (no CVSS)
- [CVE-2006-3268](https://cve.now/CVE-2006-3268.md): Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic… (no CVSS)
- [CVE-2006-3293](https://cve.now/CVE-2006-3293.md): parse\_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) via empty IRC CTCP… (no CVSS)
- [CVE-2006-3294](https://cve.now/CVE-2006-3294.md): PHP remote file inclusion vulnerability in mod\_cbsms\_messages.php in CBSMS Mambo Module 1.0 and earlier, when register\_globals is enabled… (no CVSS)
- [CVE-2006-3295](https://cve.now/CVE-2006-3295.md): Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-3296](https://cve.now/CVE-2006-3296.md): SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset… (no CVSS)
- [CVE-2006-3297](https://cve.now/CVE-2006-3297.md): Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2006-3298](https://cve.now/CVE-2006-3298.md): Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII… (no CVSS)
- [CVE-2006-3299](https://cve.now/CVE-2006-3299.md): Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-3300](https://cve.now/CVE-2006-3300.md): PHP remote file inclusion vulnerability in sms\_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-3301](https://cve.now/CVE-2006-3301.md): Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-3302](https://cve.now/CVE-2006-3302.md): PHP remote file inclusion vulnerability in mod\_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register\_globals is enabled, allows… (no CVSS)
- [CVE-2006-3303](https://cve.now/CVE-2006-3303.md): Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-3304](https://cve.now/CVE-2006-3304.md): SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn… (no CVSS)
- [CVE-2006-3305](https://cve.now/CVE-2006-3305.md): Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject… (no CVSS)
- [CVE-2006-3306](https://cve.now/CVE-2006-3306.md): Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before… (no CVSS)
- [CVE-2006-3307](https://cve.now/CVE-2006-3307.md): Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute… (no CVSS)
- [CVE-2006-3308](https://cve.now/CVE-2006-3308.md): Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors… (no CVSS)
- [CVE-2006-3309](https://cve.now/CVE-2006-3309.md): SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.