# CVEs published 2006-02-08 27 CVEs were published on February 8, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0602](https://cve.now/CVE-2006-0602.md): Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-0603](https://cve.now/CVE-2006-0603.md): Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary (no CVSS) - [CVE-2006-0604](https://cve.now/CVE-2006-0604.md): check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attacke (no CVSS) - [CVE-2006-0605](https://cve.now/CVE-2006-0605.md): Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2006-0606](https://cve.now/CVE-2006-0606.md): SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown atta (no CVSS) - [CVE-2006-0607](https://cve.now/CVE-2006-0607.md): check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass aut (no CVSS) - [CVE-2006-0608](https://cve.now/CVE-2006-0608.md): Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the usern (no CVSS) - [CVE-2006-0609](https://cve.now/CVE-2006-0609.md): Cross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-0023](https://cve.now/CVE-2006-0023.md): Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allo (no CVSS) - [CVE-2006-0578](https://cve.now/CVE-2006-0578.md): Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote at (no CVSS) - [CVE-2006-0579](https://cve.now/CVE-2006-0579.md): Multiple integer overflows in (1) the new\_demux\_packet function in demuxer.h and (2) the demux\_asf\_read\_packet function in demux\_asf.c in MP (no CVSS) - [CVE-2006-0580](https://cve.now/CVE-2006-0580.md): IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (no CVSS) - [CVE-2006-0581](https://cve.now/CVE-2006-0581.md): SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-0582](https://cve.now/CVE-2006-0582.md): Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers (no CVSS) - [CVE-2006-0583](https://cve.now/CVE-2006-0583.md): SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2006-0584](https://cve.now/CVE-2006-0584.md): The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for l (no CVSS) - [CVE-2006-0585](https://cve.now/CVE-2006-0585.md): jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via (no CVSS) - [CVE-2006-0586](https://cve.now/CVE-2006-0586.md): Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2006-0587](https://cve.now/CVE-2006-0587.md): Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying store (no CVSS) - [CVE-2006-0588](https://cve.now/CVE-2006-0588.md): SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the (1) mid and (2) (no CVSS) - [CVE-2006-0589](https://cve.now/CVE-2006-0589.md): MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leaks the path in an erro (no CVSS) - [CVE-2006-0590](https://cve.now/CVE-2006-0590.md): MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosu (no CVSS) - [CVE-2006-0591](https://cve.now/CVE-2006-0591.md): The crypt\_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt\_blowfish 0.4.7 and earlie (no CVSS) - [CVE-2006-0592](https://cve.now/CVE-2006-0592.md): Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows remote attackers to (no CVSS) - [CVE-2006-0593](https://cve.now/CVE-2006-0593.md): Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2006-0576](https://cve.now/CVE-2006-0576.md): Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modifi (no CVSS) - [CVE-2006-0577](https://cve.now/CVE-2006-0577.md): Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional st (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-02-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.