# CVEs published 2006-07-10 27 CVEs were published on July 10, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3487](https://cve.now/CVE-2006-3487.md): VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local… (no CVSS) - [CVE-2006-3488](https://cve.now/CVE-2006-3488.md): Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary… (no CVSS) - [CVE-2006-3489](https://cve.now/CVE-2006-3489.md): F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers… (no CVSS) - [CVE-2006-3490](https://cve.now/CVE-2006-3490.md): F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers… (no CVSS) - [CVE-2006-3491](https://cve.now/CVE-2006-3491.md): Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a long nickname. (no CVSS) - [CVE-2006-3492](https://cve.now/CVE-2006-3492.md): The CORBA::ORBInvokeRec::set\_answer\_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote attackers to cause… (no CVSS) - [CVE-2006-3493](https://cve.now/CVE-2006-3493.md): Buffer overflow in LsCreateLine function (mso\_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in… (no CVSS) - [CVE-2006-3494](https://cve.now/CVE-2006-3494.md): Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via… (no CVSS) - [CVE-2006-3486](https://cve.now/CVE-2006-3486.md): Off-by-one buffer overflow in the Instance\_options::complete\_initialization function in instance\_options.cc in the Instance Manager in… (no CVSS) - [CVE-2006-3472](https://cve.now/CVE-2006-3472.md): Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing… (no CVSS) - [CVE-2006-3473](https://cve.now/CVE-2006-3473.md): CRLF injection vulnerability in form\_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates… (no CVSS) - [CVE-2006-3474](https://cve.now/CVE-2006-3474.md): Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS) - [CVE-2006-3475](https://cve.now/CVE-2006-3475.md): Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in… (no CVSS) - [CVE-2006-3476](https://cve.now/CVE-2006-3476.md): Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows remote attackers… (no CVSS) - [CVE-2006-3477](https://cve.now/CVE-2006-3477.md): Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cause a denial of… (no CVSS) - [CVE-2006-3478](https://cve.now/CVE-2006-3478.md): PHP remote file inclusion vulnerability in styles/default/global\_header.php in MyPHP CMS 0.3 and earlier, when register\_globals is… (no CVSS) - [CVE-2006-3479](https://cve.now/CVE-2006-3479.md): Cross-site request forgery (CSRF) vulnerability in the del\_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and… (no CVSS) - [CVE-2006-3480](https://cve.now/CVE-2006-3480.md): Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2006-3481](https://cve.now/CVE-2006-3481.md): Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified… (no CVSS) - [CVE-2006-3482](https://cve.now/CVE-2006-3482.md): Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-3483](https://cve.now/CVE-2006-3483.md): PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allows remote attackers… (no CVSS) - [CVE-2006-3484](https://cve.now/CVE-2006-3484.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2006-3485](https://cve.now/CVE-2006-3485.md): Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-2917](https://cve.now/CVE-2006-2917.md): Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build… (no CVSS) - [CVE-2006-2936](https://cve.now/CVE-2006-2936.md): The ftdi\_sio driver (usb/serial/ftdi\_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a… (no CVSS) - [CVE-2006-3470](https://cve.now/CVE-2006-3470.md): The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges. (no CVSS) - [CVE-2006-3471](https://cve.now/CVE-2006-3471.md): Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-07-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.