# CVEs published 2006-12-05

15 CVEs were published on December 5, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6142](https://cve.now/CVE-2006-6142.md): Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-6289](https://cve.now/CVE-2006-6289.md): Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value… (no CVSS)
- [CVE-2006-6290](https://cve.now/CVE-2006-6290.md): Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33… (no CVSS)
- [CVE-2006-6291](https://cve.now/CVE-2006-6291.md): Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable… (no CVSS)
- [CVE-2006-6292](https://cve.now/CVE-2006-6292.md): Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac mini, MacBook, and MacBook Pro with Core Duo hardware allows remote… (no CVSS)
- [CVE-2006-6293](https://cve.now/CVE-2006-6293.md): Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2006-6294](https://cve.now/CVE-2006-6294.md): Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2006-6295](https://cve.now/CVE-2006-6295.md): PHP remote file inclusion vulnerability in includes/mx\_common.php in the mx\_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote… (no CVSS)
- [CVE-2006-6296](https://cve.now/CVE-2006-6296.md): The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows… (no CVSS)
- [CVE-2006-6297](https://cve.now/CVE-2006-6297.md): Stack consumption vulnerability in the KFILE JPEG (kfile\_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image… (no CVSS)
- [CVE-2006-6298](https://cve.now/CVE-2006-6298.md): SQL injection vulnerability in uye\_giris\_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2006-6299](https://cve.now/CVE-2006-6299.md): Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers… (no CVSS)
- [CVE-2006-6300](https://cve.now/CVE-2006-6300.md): Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result… (no CVSS)
- [CVE-2006-6306](https://cve.now/CVE-2006-6306.md): Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with… (no CVSS)
- [CVE-2006-6307](https://cve.now/CVE-2006-6307.md): srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.