# CVEs published 2006-02-02 28 CVEs were published on February 2, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0299](https://cve.now/CVE-2006-0299.md): The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes th (no CVSS) - [CVE-2006-0297](https://cve.now/CVE-2006-0297.md): Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow re (no CVSS) - [CVE-2006-0298](https://cve.now/CVE-2006-0298.md): The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and p (no CVSS) - [CVE-2006-0292](https://cve.now/CVE-2006-0292.md): The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attac (no CVSS) - [CVE-2006-0293](https://cve.now/CVE-2006-0293.md): The function allocation code (js\_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) an (no CVSS) - [CVE-2006-0294](https://cve.now/CVE-2006-0294.md): Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute ar (no CVSS) - [CVE-2006-0295](https://cve.now/CVE-2006-0295.md): Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbi (no CVSS) - [CVE-2006-0296](https://cve.now/CVE-2006-0296.md): The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which al (no CVSS) - [CVE-2006-0529](https://cve.now/CVE-2006-0529.md): Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220\_16 and 1.11 Build 29\_20, as used in multiple CA products, allows (no CVSS) - [CVE-2006-0530](https://cve.now/CVE-2006-0530.md): Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220\_16 and 1.11 Build 29\_20, as used in multiple CA products, allows (no CVSS) - [CVE-2003-1292](https://cve.now/CVE-2003-1292.md): PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files vi (no CVSS) - [CVE-2005-4708](https://cve.now/CVE-2005-4708.md): Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service wit (no CVSS) - [CVE-2005-4709](https://cve.now/CVE-2005-4709.md): The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal and (no CVSS) - [CVE-2006-0433](https://cve.now/CVE-2006-0433.md): Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insuffi (no CVSS) - [CVE-2006-0512](https://cve.now/CVE-2006-0512.md): PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the (no CVSS) - [CVE-2006-0516](https://cve.now/CVE-2006-0516.md): Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a (no CVSS) - [CVE-2006-0517](https://cve.now/CVE-2006-0517.md): Multiple SQL injection vulnerabilities in formulaires/inc-formulaire\_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earli (no CVSS) - [CVE-2006-0518](https://cve.now/CVE-2006-0518.md): Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attacker (no CVSS) - [CVE-2006-0519](https://cve.now/CVE-2006-0519.md): SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to (no CVSS) - [CVE-2006-0520](https://cve.now/CVE-2006-0520.md): SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute arbitr (no CVSS) - [CVE-2006-0521](https://cve.now/CVE-2006-0521.md): Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via cer (no CVSS) - [CVE-2006-0522](https://cve.now/CVE-2006-0522.md): SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allo (no CVSS) - [CVE-2006-0523](https://cve.now/CVE-2006-0523.md): SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist (no CVSS) - [CVE-2006-0524](https://cve.now/CVE-2006-0524.md): Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-0525](https://cve.now/CVE-2006-0525.md): Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DL (no CVSS) - [CVE-2006-0526](https://cve.now/CVE-2006-0526.md): The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a D (no CVSS) - [CVE-2006-0527](https://cve.now/CVE-2006-0527.md): BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style (no CVSS) - [CVE-2006-0528](https://cve.now/CVE-2006-0528.md): The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service ( (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-02-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.