# CVEs published 2006-01-22

24 CVEs were published on January 22, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0354](https://cve.now/CVE-2006-0354.md): Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (terminat (no CVSS)
- [CVE-2006-0355](https://cve.now/CVE-2006-0355.md): Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command comb (no CVSS)
- [CVE-2006-0356](https://cve.now/CVE-2006-0356.md): Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with (no CVSS)
- [CVE-2006-0357](https://cve.now/CVE-2006-0357.md): Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via (no CVSS)
- [CVE-2006-0358](https://cve.now/CVE-2006-0358.md): Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2006-0359](https://cve.now/CVE-2006-0359.md): Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE (no CVSS)
- [CVE-2006-0360](https://cve.now/CVE-2006-0360.md): MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service vi (no CVSS)
- [CVE-2006-0361](https://cve.now/CVE-2006-0361.md): Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-0362](https://cve.now/CVE-2006-0362.md): TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a den (no CVSS)
- [CVE-2006-0363](https://cve.now/CVE-2006-0363.md): The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY\_CURRENT\_USER\\Software\\Microso (no CVSS)
- [CVE-2006-0364](https://cve.now/CVE-2006-0364.md): Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a sign (no CVSS)
- [CVE-2006-0365](https://cve.now/CVE-2006-0365.md): Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2006-0366](https://cve.now/CVE-2006-0366.md): Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a ja (no CVSS)
- [CVE-2006-0367](https://cve.now/CVE-2006-0367.md): Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow (no CVSS)
- [CVE-2006-0368](https://cve.now/CVE-2006-0368.md): Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) caus (no CVSS)
- [CVE-2006-0369](https://cve.now/CVE-2006-0369.md): MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT \* FROM information\_schema.views;" quer (no CVSS)
- [CVE-2006-0370](https://cve.now/CVE-2006-0370.md): Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote att (no CVSS)
- [CVE-2006-0371](https://cve.now/CVE-2006-0371.md): Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly in (no CVSS)
- [CVE-2006-0372](https://cve.now/CVE-2006-0372.md): Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2006-0373](https://cve.now/CVE-2006-0373.md): Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-0374](https://cve.now/CVE-2006-0374.md): Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1 (no CVSS)
- [CVE-2006-0375](https://cve.now/CVE-2006-0375.md): Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol ( (no CVSS)
- [CVE-2006-0376](https://cve.now/CVE-2006-0376.md): The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user w (no CVSS)
- [CVE-2006-0353](https://cve.now/CVE-2006-0353.md): unix\_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.