# CVEs published 2006-02-18 24 CVEs were published on February 18, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2005-4724](https://cve.now/CVE-2005-4724.md): SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-Fo (no CVSS) - [CVE-2006-0042](https://cve.now/CVE-2006-0042.md): Unspecified vulnerability in (1) apreq\_parse\_headers and (2) apreq\_parse\_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 al (no CVSS) - [CVE-2006-0767](https://cve.now/CVE-2006-0767.md): CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that rev (no CVSS) - [CVE-2006-0768](https://cve.now/CVE-2006-0768.md): Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests. (no CVSS) - [CVE-2006-0769](https://cve.now/CVE-2006-0769.md): Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors. (no CVSS) - [CVE-2006-0770](https://cve.now/CVE-2006-0770.md): Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2006-0771](https://cve.now/CVE-2006-0771.md): Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attack (no CVSS) - [CVE-2006-0750](https://cve.now/CVE-2006-0750.md): SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers (no CVSS) - [CVE-2006-0751](https://cve.now/CVE-2006-0751.md): Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Network Object Oriented Fil (no CVSS) - [CVE-2006-0752](https://cve.now/CVE-2006-0752.md): Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows r (no CVSS) - [CVE-2006-0753](https://cve.now/CVE-2006-0753.md): Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory cons (no CVSS) - [CVE-2006-0754](https://cve.now/CVE-2006-0754.md): dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain (no CVSS) - [CVE-2006-0755](https://cve.now/CVE-2006-0755.md): Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register\_globals is enabled, allow remote attackers t (CVSS 5.6) - [CVE-2006-0756](https://cve.now/CVE-2006-0756.md): dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows (no CVSS) - [CVE-2006-0757](https://cve.now/CVE-2006-0757.md): Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contact (no CVSS) - [CVE-2006-0758](https://cve.now/CVE-2006-0758.md): Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-0759](https://cve.now/CVE-2006-0759.md): Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the cont (no CVSS) - [CVE-2006-0760](https://cve.now/CVE-2006-0760.md): LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain s (no CVSS) - [CVE-2006-0761](https://cve.now/CVE-2006-0761.md): Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 fo (no CVSS) - [CVE-2006-0762](https://cve.now/CVE-2006-0762.md): WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving (no CVSS) - [CVE-2006-0763](https://cve.now/CVE-2006-0763.md): Cross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-0764](https://cve.now/CVE-2006-0764.md): The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anom (no CVSS) - [CVE-2006-0765](https://cve.now/CVE-2006-0765.md): GUI display truncation vulnerability in ICQ Inc. (no CVSS) - [CVE-2006-0766](https://cve.now/CVE-2006-0766.md): ICQ Inc. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-02-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.