# CVEs published 2006-01-01

9 CVEs were published on January 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4593](https://cve.now/CVE-2005-4593.md): PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register\_globals is enabled, allows remote attackers to (no CVSS)
- [CVE-2005-4594](https://cve.now/CVE-2005-4594.md): Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive. (no CVSS)
- [CVE-2005-4595](https://cve.now/CVE-2005-4595.md): Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a (no CVSS)
- [CVE-2005-4596](https://cve.now/CVE-2005-4596.md): Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4597](https://cve.now/CVE-2005-4597.md): Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-4598](https://cve.now/CVE-2005-4598.md): Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-4599](https://cve.now/CVE-2005-4599.md): Cross-site scripting (XSS) vulnerability in tiny\_mce\_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2005-4600](https://cve.now/CVE-2005-4600.md): Directory traversal vulnerability in tiny\_mce\_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbi (no CVSS)
- [CVE-2005-4601](https://cve.now/CVE-2005-4601.md): The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.