# CVEs published 2006-02-06

8 CVEs were published on February 6, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0513](https://cve.now/CVE-2006-0513.md): Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1 allows remote attac (no CVSS)
- [CVE-2006-0562](https://cve.now/CVE-2006-0562.md): Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-0563](https://cve.now/CVE-2006-0563.md): SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid (no CVSS)
- [CVE-2006-0564](https://cve.now/CVE-2006-0564.md): Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTM (no CVSS)
- [CVE-2006-0565](https://cve.now/CVE-2006-0565.md): PHP remote file include vulnerability in inc/backend\_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-0566](https://cve.now/CVE-2006-0566.md): The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP me (no CVSS)
- [CVE-2006-0437](https://cve.now/CVE-2006-0437.md): Cross-site scripting (XSS) vulnerability in admin\_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-0438](https://cve.now/CVE-2006-0438.md): Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.