# CVEs published 2006-01-27 20 CVEs were published on January 27, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2005-4670](https://cve.now/CVE-2005-4670.md): Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attackers to inject arbitra (no CVSS) - [CVE-2005-4671](https://cve.now/CVE-2005-4671.md): Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitra (no CVSS) - [CVE-2005-4672](https://cve.now/CVE-2005-4672.md): Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject (no CVSS) - [CVE-2005-4673](https://cve.now/CVE-2005-4673.md): ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate v (no CVSS) - [CVE-2005-4674](https://cve.now/CVE-2005-4674.md): Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2005-4675](https://cve.now/CVE-2005-4675.md): Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-0461](https://cve.now/CVE-2006-0461.md): Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-0462](https://cve.now/CVE-2006-0462.md): SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-0463](https://cve.now/CVE-2006-0463.md): Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the (1) g (no CVSS) - [CVE-2006-0464](https://cve.now/CVE-2006-0464.md): Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-0465](https://cve.now/CVE-2006-0465.md): Cross-site scripting (XSS) vulnerability in risultati\_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-0466](https://cve.now/CVE-2006-0466.md): Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2002-1572](https://cve.now/CVE-2002-1572.md): Signed integer overflow in the bttv\_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and at (no CVSS) - [CVE-2002-1573](https://cve.now/CVE-2002-1573.md): Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack ve (no CVSS) - [CVE-2006-0057](https://cve.now/CVE-2006-0057.md): Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unkn (no CVSS) - [CVE-2006-0446](https://cve.now/CVE-2006-0446.md): Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server v (no CVSS) - [CVE-2006-0447](https://cve.now/CVE-2006-0447.md): Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a l (no CVSS) - [CVE-2006-0448](https://cve.now/CVE-2006-0448.md): Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PR (no CVSS) - [CVE-2006-0449](https://cve.now/CVE-2006-0449.md): Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of s (no CVSS) - [CVE-2006-0450](https://cve.now/CVE-2006-0450.md): phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering many users through prof (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-01-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.