# CVEs published 2006-12-10

57 CVEs were published on December 10, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6444](https://cve.now/CVE-2006-6444.md): Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2006-6445](https://cve.now/CVE-2006-6445.md): Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary… (no CVSS)
- [CVE-2006-6446](https://cve.now/CVE-2006-6446.md): SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS)
- [CVE-2006-6447](https://cve.now/CVE-2006-6447.md): Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-6448](https://cve.now/CVE-2006-6448.md): Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-6449](https://cve.now/CVE-2006-6449.md): Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2006-6450](https://cve.now/CVE-2006-6450.md): Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow… (no CVSS)
- [CVE-2006-6451](https://cve.now/CVE-2006-6451.md): Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-6452](https://cve.now/CVE-2006-6452.md): Multiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to… (no CVSS)
- [CVE-2006-6453](https://cve.now/CVE-2006-6453.md): PHP remote file inclusion vulnerability in JOWAMP\_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated users to execute… (no CVSS)
- [CVE-2006-6454](https://cve.now/CVE-2006-6454.md): execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell… (no CVSS)
- [CVE-2006-6455](https://cve.now/CVE-2006-6455.md): Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow… (no CVSS)
- [CVE-2006-6383](https://cve.now/CVE-2006-6383.md): PHP 5.2.0 and 4.4 allows local users to bypass safe\_mode and open\_basedir restrictions via a malicious path and a null byte before a ";"… (no CVSS)
- [CVE-2006-6443](https://cve.now/CVE-2006-6443.md): Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91… (no CVSS)
- [CVE-2006-6379](https://cve.now/CVE-2006-6379.md): Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier… (no CVSS)
- [CVE-2000-1242](https://cve.now/CVE-2000-1242.md): The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain… (no CVSS)
- [CVE-2006-6332](https://cve.now/CVE-2006-6332.md): Stack-based buffer overflow in net80211/ieee80211\_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2006-6413](https://cve.now/CVE-2006-6413.md): Cross-site scripting (XSS) vulnerability in Amateras sns 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-6414](https://cve.now/CVE-2006-6414.md): Multiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2006-6415](https://cve.now/CVE-2006-6415.md): PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute… (no CVSS)
- [CVE-2006-6416](https://cve.now/CVE-2006-6416.md): Multiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2006-6417](https://cve.now/CVE-2006-6417.md): PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers… (no CVSS)
- [CVE-2006-6418](https://cve.now/CVE-2006-6418.md): Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain… (no CVSS)
- [CVE-2006-6419](https://cve.now/CVE-2006-6419.md): jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com\_jce) allows remote… (no CVSS)
- [CVE-2006-6420](https://cve.now/CVE-2006-6420.md): Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0… (no CVSS)
- [CVE-2006-6421](https://cve.now/CVE-2006-6421.md): Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote… (no CVSS)
- [CVE-2006-6422](https://cve.now/CVE-2006-6422.md): Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the… (no CVSS)
- [CVE-2006-6426](https://cve.now/CVE-2006-6426.md): PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register\_globals is enabled… (no CVSS)
- [CVE-2006-6427](https://cve.now/CVE-2006-6427.md): The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before… (no CVSS)
- [CVE-2006-6428](https://cve.now/CVE-2006-6428.md): Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allow remote attackers… (no CVSS)
- [CVE-2006-6429](https://cve.now/CVE-2006-6429.md): Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to… (no CVSS)
- [CVE-2006-6430](https://cve.now/CVE-2006-6430.md): Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not… (no CVSS)
- [CVE-2006-6431](https://cve.now/CVE-2006-6431.md): Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before… (no CVSS)
- [CVE-2006-6432](https://cve.now/CVE-2006-6432.md): Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before… (no CVSS)
- [CVE-2006-6433](https://cve.now/CVE-2006-6433.md): Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record… (no CVSS)
- [CVE-2006-6434](https://cve.now/CVE-2006-6434.md): Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before… (no CVSS)
- [CVE-2006-6435](https://cve.now/CVE-2006-6435.md): The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before… (no CVSS)
- [CVE-2006-6436](https://cve.now/CVE-2006-6436.md): Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x… (no CVSS)
- [CVE-2006-6437](https://cve.now/CVE-2006-6437.md): ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows… (no CVSS)
- [CVE-2006-6438](https://cve.now/CVE-2006-6438.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user… (no CVSS)
- [CVE-2006-6439](https://cve.now/CVE-2006-6439.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers… (no CVSS)
- [CVE-2006-6440](https://cve.now/CVE-2006-6440.md): Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x… (no CVSS)
- [CVE-2006-6441](https://cve.now/CVE-2006-6441.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to… (no CVSS)
- [CVE-2006-6442](https://cve.now/CVE-2006-6442.md): Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used… (no CVSS)
- [CVE-2006-5874](https://cve.now/CVE-2006-5874.md): Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME… (no CVSS)
- [CVE-2006-6221](https://cve.now/CVE-2006-6221.md): 2X ThinClientServer Enterprise Edition before 4.0.2248 allows remote attackers to create multiple privileged accounts via a replay attack… (no CVSS)
- [CVE-2006-6400](https://cve.now/CVE-2006-6400.md): Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer… (no CVSS)
- [CVE-2006-6401](https://cve.now/CVE-2006-6401.md): Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2006-6402](https://cve.now/CVE-2006-6402.md): SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-6403](https://cve.now/CVE-2006-6403.md): mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via (1) details and (2) by array… (no CVSS)
- [CVE-2006-6405](https://cve.now/CVE-2006-6405.md): BitDefender Mail Protection for SMB 2.0 allows remote attackers to bypass virus detection by inserting invalid characters into base64… (no CVSS)
- [CVE-2006-6406](https://cve.now/CVE-2006-6406.md): Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded… (no CVSS)
- [CVE-2006-6407](https://cve.now/CVE-2006-6407.md): F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus detection by inserting invalid characters into… (no CVSS)
- [CVE-2006-6408](https://cve.now/CVE-2006-6408.md): Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into… (no CVSS)
- [CVE-2006-6409](https://cve.now/CVE-2006-6409.md): F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly… (no CVSS)
- [CVE-2006-6410](https://cve.now/CVE-2006-6410.md): Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the… (no CVSS)
- [CVE-2006-6411](https://cve.now/CVE-2006-6411.md): PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service (crash) via a TCP SYN… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.