# CVEs published 2006-01-12

8 CVEs were published on January 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4648](https://cve.now/CVE-2005-4648.md): Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (no CVSS)
- [CVE-2006-0180](https://cve.now/CVE-2006-0180.md): Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the T (no CVSS)
- [CVE-2006-0181](https://cve.now/CVE-2006-0181.md): Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default pas (no CVSS)
- [CVE-2006-0182](https://cve.now/CVE-2006-0182.md): login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to (no CVSS)
- [CVE-2006-0183](https://cve.now/CVE-2006-0183.md): Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP co (no CVSS)
- [CVE-2006-0184](https://cve.now/CVE-2006-0184.md): Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to g (no CVSS)
- [CVE-2006-0185](https://cve.now/CVE-2006-0185.md): Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-0187](https://cve.now/CVE-2006-0187.md): By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1\_Load function) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.