# CVEs published 2006-11-22

38 CVEs were published on November 22, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3973](https://cve.now/CVE-2006-3973.md): My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall"… (no CVSS)
- [CVE-2006-6063](https://cve.now/CVE-2006-6063.md): Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file… (no CVSS)
- [CVE-2006-6064](https://cve.now/CVE-2006-6064.md): Multiple buffer overflows in the Message Parsing Interpreter (MPI) in Fuzzball MUCK before 6.07 allow remote attackers to execute… (no CVSS)
- [CVE-2006-6065](https://cve.now/CVE-2006-6065.md): PHP remote file inclusion vulnerability in includes/mx\_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to… (no CVSS)
- [CVE-2006-6066](https://cve.now/CVE-2006-6066.md): Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-6067](https://cve.now/CVE-2006-6067.md): Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-6068](https://cve.now/CVE-2006-6068.md): Directory traversal vulnerability in the cached\_album function in functions.php for mAlbum 0.3 and earlier allows remote attackers to list… (no CVSS)
- [CVE-2006-6069](https://cve.now/CVE-2006-6069.md): index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal parameter. (no CVSS)
- [CVE-2006-6070](https://cve.now/CVE-2006-6070.md): SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2006-5868](https://cve.now/CVE-2006-5868.md): Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors… (no CVSS)
- [CVE-2006-6053](https://cve.now/CVE-2006-6053.md): The ext3fs\_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with… (no CVSS)
- [CVE-2006-6054](https://cve.now/CVE-2006-6054.md): The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed… (no CVSS)
- [CVE-2006-6055](https://cve.now/CVE-2006-6055.md): Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-6056](https://cve.now/CVE-2006-6056.md): Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of… (no CVSS)
- [CVE-2006-6057](https://cve.now/CVE-2006-6057.md): The Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly other operating systems, allows local… (no CVSS)
- [CVE-2006-6058](https://cve.now/CVE-2006-6058.md): The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang)… (no CVSS)
- [CVE-2006-6059](https://cve.now/CVE-2006-6059.md): Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2006-6060](https://cve.now/CVE-2006-6060.md): The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service… (no CVSS)
- [CVE-2006-6061](https://cve.now/CVE-2006-6061.md): com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-6062](https://cve.now/CVE-2006-6062.md): Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2006-6035](https://cve.now/CVE-2006-6035.md): Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2006-6036](https://cve.now/CVE-2006-6036.md): SQL injection vulnerability in OpenHuman before 1.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2006-6037](https://cve.now/CVE-2006-6037.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dan Jensen Travelsized CMS 0.4.1 and earlier allow remote attackers to… (no CVSS)
- [CVE-2006-6038](https://cve.now/CVE-2006-6038.md): SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2006-6039](https://cve.now/CVE-2006-6039.md): SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-6040](https://cve.now/CVE-2006-6040.md): Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject… (no CVSS)
- [CVE-2006-6041](https://cve.now/CVE-2006-6041.md): Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before… (no CVSS)
- [CVE-2006-6042](https://cve.now/CVE-2006-6042.md): PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register\_globals is enabled, allows… (no CVSS)
- [CVE-2006-6043](https://cve.now/CVE-2006-6043.md): PHP file inclusion vulnerability in loginform-inc.php in Oliver (formerly Webshare) 1.2.2 and earlier, when register\_globals is enabled… (no CVSS)
- [CVE-2006-6044](https://cve.now/CVE-2006-6044.md): PHP remote file inclusion vulnerability in gallery\_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2006-6045](https://cve.now/CVE-2006-6045.md): Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2006-6046](https://cve.now/CVE-2006-6046.md): Multiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2006-6047](https://cve.now/CVE-2006-6047.md): Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and… (no CVSS)
- [CVE-2006-6048](https://cve.now/CVE-2006-6048.md): SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic\_quotes\_gpc is disabled, allows remote attackers to execute… (no CVSS)
- [CVE-2006-6049](https://cve.now/CVE-2006-6049.md): PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com\_shambo2) component for Mambo 4.5 allows remote attackers to… (no CVSS)
- [CVE-2006-6050](https://cve.now/CVE-2006-6050.md): Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2006-6051](https://cve.now/CVE-2006-6051.md): PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com\_reporter) component for Mambo and Joomla! allows… (no CVSS)
- [CVE-2006-6052](https://cve.now/CVE-2006-6052.md): NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.