# CVEs published 2006-07-03

14 CVEs were published on July 3, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3344](https://cve.now/CVE-2006-3344.md): Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal… (no CVSS)
- [CVE-2006-3345](https://cve.now/CVE-2006-3345.md): Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-3346](https://cve.now/CVE-2006-3346.md): SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grp\_id… (no CVSS)
- [CVE-2006-3347](https://cve.now/CVE-2006-3347.md): SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-3348](https://cve.now/CVE-2006-3348.md): Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-3349](https://cve.now/CVE-2006-3349.md): Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in… (no CVSS)
- [CVE-2006-3337](https://cve.now/CVE-2006-3337.md): Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers… (no CVSS)
- [CVE-2006-3338](https://cve.now/CVE-2006-3338.md): Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-3339](https://cve.now/CVE-2006-3339.md): secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified… (no CVSS)
- [CVE-2006-3340](https://cve.now/CVE-2006-3340.md): Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register\_globals is enabled, allow remote… (no CVSS)
- [CVE-2006-3341](https://cve.now/CVE-2006-3341.md): SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-3342](https://cve.now/CVE-2006-3342.md): Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-3343](https://cve.now/CVE-2006-3343.md): PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-3335](https://cve.now/CVE-2006-3335.md): Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-07-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.