# CVEs published 2006-09-12

34 CVEs were published on September 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0001](https://cve.now/CVE-2006-0001.md): Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2006-0032](https://cve.now/CVE-2006-0032.md): Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option… (no CVSS)
- [CVE-2006-3311](https://cve.now/CVE-2006-3311.md): Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote… (no CVSS)
- [CVE-2006-3442](https://cve.now/CVE-2006-3442.md): Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2006-3873](https://cve.now/CVE-2006-3873.md): Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch… (no CVSS)
- [CVE-2006-4381](https://cve.now/CVE-2006-4381.md): Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie. (no CVSS)
- [CVE-2006-4382](https://cve.now/CVE-2006-4382.md): Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted… (no CVSS)
- [CVE-2006-4384](https://cve.now/CVE-2006-4384.md): Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the… (no CVSS)
- [CVE-2006-4385](https://cve.now/CVE-2006-4385.md): Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image. (no CVSS)
- [CVE-2006-4386](https://cve.now/CVE-2006-4386.md): Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264… (no CVSS)
- [CVE-2006-4388](https://cve.now/CVE-2006-4388.md): Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix… (no CVSS)
- [CVE-2006-4389](https://cve.now/CVE-2006-4389.md): Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which… (no CVSS)
- [CVE-2006-4640](https://cve.now/CVE-2006-4640.md): Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess… (no CVSS)
- [CVE-2006-2658](https://cve.now/CVE-2006-2658.md): Directory traversal vulnerability in the xsp component in mod\_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and… (no CVSS)
- [CVE-2006-4625](https://cve.now/CVE-2006-4625.md): PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe\_mode… (no CVSS)
- [CVE-2006-4705](https://cve.now/CVE-2006-4705.md): SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to… (no CVSS)
- [CVE-2006-4706](https://cve.now/CVE-2006-4706.md): Cross-site scripting (XSS) vulnerability in inc/functions\_post.php in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject… (no CVSS)
- [CVE-2006-4707](https://cve.now/CVE-2006-4707.md): Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard) 1.1.7 allows… (no CVSS)
- [CVE-2006-4708](https://cve.now/CVE-2006-4708.md): Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-4709](https://cve.now/CVE-2006-4709.md): SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter. (no CVSS)
- [CVE-2006-4710](https://cve.now/CVE-2006-4710.md): Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-4711](https://cve.now/CVE-2006-4711.md): Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0… (no CVSS)
- [CVE-2006-4712](https://cve.now/CVE-2006-4712.md): Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2006-4713](https://cve.now/CVE-2006-4713.md): PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2006-4714](https://cve.now/CVE-2006-4714.md): PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when… (no CVSS)
- [CVE-2006-4715](https://cve.now/CVE-2006-4715.md): SQL injection vulnerability in pdf\_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote… (no CVSS)
- [CVE-2006-4716](https://cve.now/CVE-2006-4716.md): PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2006-4717](https://cve.now/CVE-2006-4717.md): The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before… (no CVSS)
- [CVE-2006-4718](https://cve.now/CVE-2006-4718.md): Multiple cross-site scripting (XSS) vulnerabilities in livre\_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-4719](https://cve.now/CVE-2006-4719.md): Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register\_globals is enabled, allow remote attackers to… (no CVSS)
- [CVE-2006-4720](https://cve.now/CVE-2006-4720.md): PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2006-4721](https://cve.now/CVE-2006-4721.md): Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary… (no CVSS)
- [CVE-2006-4722](https://cve.now/CVE-2006-4722.md): PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2006-4723](https://cve.now/CVE-2006-4723.md): PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register\_globals and WebAdmin is… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.