# CVEs published 2006-02-22

17 CVEs were published on February 22, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0848](https://cve.now/CVE-2006-0848.md): The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary comm (no CVSS)
- [CVE-2006-0834](https://cve.now/CVE-2006-0834.md): Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attac (no CVSS)
- [CVE-2006-0835](https://cve.now/CVE-2006-0835.md): SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a (no CVSS)
- [CVE-2006-0836](https://cve.now/CVE-2006-0836.md): Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user into importing an LDIF (no CVSS)
- [CVE-2006-0837](https://cve.now/CVE-2006-0837.md): IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.23 (no CVSS)
- [CVE-2006-0838](https://cve.now/CVE-2006-0838.md): IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS\_DBPASS, (2) CMSM\_DBPASS, and (3) RPT\_DBPASS fields (no CVSS)
- [CVE-2006-0839](https://cve.now/CVE-2006-0839.md): The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remot (no CVSS)
- [CVE-2006-0840](https://cve.now/CVE-2006-0840.md): manage\_user\_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows (no CVSS)
- [CVE-2006-0841](https://cve.now/CVE-2006-0841.md): Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2006-0842](https://cve.now/CVE-2006-0842.md): Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified (no CVSS)
- [CVE-2006-0843](https://cve.now/CVE-2006-0843.md): Leif M. (no CVSS)
- [CVE-2006-0844](https://cve.now/CVE-2006-0844.md): Leif M. (no CVSS)
- [CVE-2006-0845](https://cve.now/CVE-2006-0845.md): Leif M. (no CVSS)
- [CVE-2006-0846](https://cve.now/CVE-2006-0846.md): Multiple cross-site scripting (XSS) vulnerabilities in Leif M. (no CVSS)
- [CVE-2006-0847](https://cve.now/CVE-2006-0847.md): Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via (no CVSS, cherrypy)
- [CVE-2006-0832](https://cve.now/CVE-2006-0832.md): Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the (1) uid and (no CVSS)
- [CVE-2006-0833](https://cve.now/CVE-2006-0833.md): Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.