# CVEs published 2006-11-01

16 CVEs were published on November 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4517](https://cve.now/CVE-2006-4517.md): Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter… (no CVSS)
- [CVE-2006-4704](https://cve.now/CVE-2006-4704.md): Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in… (no CVSS)
- [CVE-2006-4839](https://cve.now/CVE-2006-4839.md): Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite… (no CVSS)
- [CVE-2006-5645](https://cve.now/CVE-2006-5645.md): Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled… (no CVSS)
- [CVE-2006-5646](https://cve.now/CVE-2006-5646.md): Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other… (no CVSS)
- [CVE-2006-5647](https://cve.now/CVE-2006-5647.md): Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote… (no CVSS)
- [CVE-2006-5634](https://cve.now/CVE-2006-5634.md): Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL… (no CVSS)
- [CVE-2006-5635](https://cve.now/CVE-2006-5635.md): SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW… (no CVSS)
- [CVE-2006-5636](https://cve.now/CVE-2006-5636.md): PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2006-5637](https://cve.now/CVE-2006-5637.md): PHP remote file inclusion vulnerability in faq\_reply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2006-5638](https://cve.now/CVE-2006-5638.md): Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-5639](https://cve.now/CVE-2006-5639.md): Unspecified vulnerability in the random number generator in OpenWBEM (Web Based Enterprise Management) 3.2.0 allows attackers to gain… (no CVSS)
- [CVE-2006-5640](https://cve.now/CVE-2006-5640.md): SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-5641](https://cve.now/CVE-2006-5641.md): SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-5642](https://cve.now/CVE-2006-5642.md): Unspecified vulnerability in NmnLogger 1.0.0 and earlier has unknown impact and attack vectors related to configuration of mesasge drivers. (no CVSS)
- [CVE-2006-5643](https://cve.now/CVE-2006-5643.md): Cross-site scripting (XSS) vulnerability in search\_de.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.