# CVEs published 2006-02-15

53 CVEs were published on February 15, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0455](https://cve.now/CVE-2006-0455.md): gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached si (no CVSS)
- [CVE-2006-0719](https://cve.now/CVE-2006-0719.md): SQL injection vulnerability in member\_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2006-0718](https://cve.now/CVE-2006-0718.md): The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows rem (no CVSS)
- [CVE-2005-2712](https://cve.now/CVE-2005-2712.md): The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (cra (no CVSS)
- [CVE-2005-4716](https://cve.now/CVE-2005-4716.md): Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via (no CVSS)
- [CVE-2005-4717](https://cve.now/CVE-2005-4717.md): Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows (no CVSS)
- [CVE-2005-4718](https://cve.now/CVE-2005-4718.md): Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url( (no CVSS)
- [CVE-2005-4719](https://cve.now/CVE-2005-4719.md): Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2005-4720](https://cve.now/CVE-2005-4720.md): Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a (no CVSS)
- [CVE-2005-4721](https://cve.now/CVE-2005-4721.md): Cross-site scripting (XSS) vulnerability in search.cfm in tmsPUBLISHER 3.3 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-4722](https://cve.now/CVE-2005-4722.md): \_Request\_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, (no CVSS)
- [CVE-2005-4723](https://cve.now/CVE-2005-4723.md): D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (device reboot) via a (no CVSS)
- [CVE-2006-0666](https://cve.now/CVE-2006-0666.md): Unspecified vulnerability in the (1) unix\_mp and (2) unix\_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cau (no CVSS)
- [CVE-2006-0688](https://cve.now/CVE-2006-0688.md): PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2006-0689](https://cve.now/CVE-2006-0689.md): Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2006-0690](https://cve.now/CVE-2006-0690.md): Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspec (no CVSS)
- [CVE-2006-0691](https://cve.now/CVE-2006-0691.md): edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to over (no CVSS)
- [CVE-2006-0692](https://cve.now/CVE-2006-0692.md): Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2006-0693](https://cve.now/CVE-2006-0693.md): Multiple SQL injection vulnerabilities in rb\_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arb (no CVSS)
- [CVE-2006-0694](https://cve.now/CVE-2006-0694.md): Unspecified vulnerability in the loaders (load\_\*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecifie (no CVSS)
- [CVE-2006-0695](https://cve.now/CVE-2006-0695.md): Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrar (no CVSS)
- [CVE-2006-0696](https://cve.now/CVE-2006-0696.md): SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2006-0697](https://cve.now/CVE-2006-0697.md): Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified v (no CVSS)
- [CVE-2006-0698](https://cve.now/CVE-2006-0698.md): Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "othe (no CVSS)
- [CVE-2006-0699](https://cve.now/CVE-2006-0699.md): Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to i (no CVSS)
- [CVE-2006-0700](https://cve.now/CVE-2006-0700.md): imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document th (no CVSS)
- [CVE-2006-0701](https://cve.now/CVE-2006-0701.md): readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters. (no CVSS)
- [CVE-2006-0702](https://cve.now/CVE-2006-0702.md): admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (no CVSS)
- [CVE-2006-0703](https://cve.now/CVE-2006-0703.md): Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving th (no CVSS)
- [CVE-2006-0704](https://cve.now/CVE-2006-0704.md): iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information (no CVSS)
- [CVE-2006-0705](https://cve.now/CVE-2006-0705.md): Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX (no CVSS)
- [CVE-2006-0706](https://cve.now/CVE-2006-0706.md): Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2006-0707](https://cve.now/CVE-2006-0707.md): PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multipl (no CVSS)
- [CVE-2006-0708](https://cve.now/CVE-2006-0708.md): Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containin (no CVSS)
- [CVE-2006-0709](https://cve.now/CVE-2006-0709.md): Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary co (no CVSS)
- [CVE-2006-0710](https://cve.now/CVE-2006-0710.md): Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP re (no CVSS)
- [CVE-2006-0711](https://cve.now/CVE-2006-0711.md): The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote att (no CVSS)
- [CVE-2006-0712](https://cve.now/CVE-2006-0712.md): mail\_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, which allows remote atta (no CVSS)
- [CVE-2006-0713](https://cve.now/CVE-2006-0713.md): Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (no CVSS)
- [CVE-2006-0714](https://cve.now/CVE-2006-0714.md): Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbi (no CVSS)
- [CVE-2006-0715](https://cve.now/CVE-2006-0715.md): Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field. (no CVSS)
- [CVE-2006-0716](https://cve.now/CVE-2006-0716.md): SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) (no CVSS)
- [CVE-2006-0717](https://cve.now/CVE-2006-0717.md): IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by (no CVSS)
- [CVE-2005-2618](https://cve.now/CVE-2005-2618.md): Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow re (no CVSS)
- [CVE-2005-2619](https://cve.now/CVE-2005-2619.md): Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7. (no CVSS)
- [CVE-2006-0680](https://cve.now/CVE-2006-0680.md): Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled (no CVSS)
- [CVE-2006-0681](https://cve.now/CVE-2006-0681.md): Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute arbitrary code via for (no CVSS)
- [CVE-2006-0682](https://cve.now/CVE-2006-0682.md): Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-0683](https://cve.now/CVE-2006-0683.md): Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers (no CVSS)
- [CVE-2006-0684](https://cve.now/CVE-2006-0684.md): change\_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the pa (no CVSS)
- [CVE-2006-0685](https://cve.now/CVE-2006-0685.md): The check\_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, (no CVSS)
- [CVE-2006-0686](https://cve.now/CVE-2006-0686.md): add\_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative us (no CVSS)
- [CVE-2006-0687](https://cve.now/CVE-2006-0687.md): process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.