# CVEs published 2006-07-25 32 CVEs were published on July 25, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3119](https://cve.now/CVE-2006-3119.md): The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows… (no CVSS) - [CVE-2006-3841](https://cve.now/CVE-2006-3841.md): Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror… (no CVSS) - [CVE-2006-3842](https://cve.now/CVE-2006-3842.md): Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or… (no CVSS) - [CVE-2006-3843](https://cve.now/CVE-2006-3843.md): PHP remote file inclusion vulnerability in com\_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute… (no CVSS) - [CVE-2006-3844](https://cve.now/CVE-2006-3844.md): Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the… (no CVSS) - [CVE-2006-3845](https://cve.now/CVE-2006-3845.md): Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long… (no CVSS) - [CVE-2006-3846](https://cve.now/CVE-2006-3846.md): PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute… (no CVSS) - [CVE-2006-3847](https://cve.now/CVE-2006-3847.md): PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php… (no CVSS) - [CVE-2006-3848](https://cve.now/CVE-2006-3848.md): Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-3849](https://cve.now/CVE-2006-3849.md): Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code… (no CVSS) - [CVE-2006-3850](https://cve.now/CVE-2006-3850.md): PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old\_settings.php exists, allows… (no CVSS) - [CVE-2006-3851](https://cve.now/CVE-2006-3851.md): SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2006-3852](https://cve.now/CVE-2006-3852.md): Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the… (no CVSS) - [CVE-2006-3619](https://cve.now/CVE-2006-3619.md): Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted… (no CVSS) - [CVE-2006-3837](https://cve.now/CVE-2006-3837.md): delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value… (no CVSS) - [CVE-2006-3820](https://cve.now/CVE-2006-3820.md): Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-3821](https://cve.now/CVE-2006-3821.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the… (no CVSS) - [CVE-2006-3822](https://cve.now/CVE-2006-3822.md): SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2006-3823](https://cve.now/CVE-2006-3823.md): SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic 2.0.3 allows… (no CVSS) - [CVE-2006-3824](https://cve.now/CVE-2006-3824.md): systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which… (no CVSS) - [CVE-2006-3825](https://cve.now/CVE-2006-3825.md): The IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes that differ from the routing table, possibly… (no CVSS) - [CVE-2006-3826](https://cve.now/CVE-2006-3826.md): Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote… (no CVSS) - [CVE-2006-3827](https://cve.now/CVE-2006-3827.md): SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows… (no CVSS) - [CVE-2006-3828](https://cve.now/CVE-2006-3828.md): Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated… (no CVSS) - [CVE-2006-3829](https://cve.now/CVE-2006-3829.md): Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows… (no CVSS) - [CVE-2006-3830](https://cve.now/CVE-2006-3830.md): The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote… (no CVSS) - [CVE-2006-3831](https://cve.now/CVE-2006-3831.md): The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and… (no CVSS) - [CVE-2006-3832](https://cve.now/CVE-2006-3832.md): SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-3833](https://cve.now/CVE-2006-3833.md): index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten… (no CVSS) - [CVE-2006-3834](https://cve.now/CVE-2006-3834.md): EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry… (no CVSS) - [CVE-2006-3835](https://cve.now/CVE-2006-3835.md): Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped… (no CVSS, org.apache.tomcat:tomcat) - [CVE-2006-3836](https://cve.now/CVE-2006-3836.md): Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-07-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.