# CVEs published 2006-02-24

21 CVEs were published on February 24, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0884](https://cve.now/CVE-2006-0884.md): The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascri (no CVSS)
- [CVE-2004-2654](https://cve.now/CVE-2004-2654.md): The clientAbortBody function in client\_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2006-0813](https://cve.now/CVE-2006-0813.md): Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archiv (no CVSS)
- [CVE-2006-0871](https://cve.now/CVE-2006-0871.md): Directory traversal vulnerability in the \_setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers (no CVSS)
- [CVE-2006-0872](https://cve.now/CVE-2006-0872.md): Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary (no CVSS)
- [CVE-2006-0873](https://cve.now/CVE-2006-0873.md): Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include (no CVSS)
- [CVE-2006-0874](https://cve.now/CVE-2006-0874.md): Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, as addressed by "Urg (no CVSS)
- [CVE-2006-0875](https://cve.now/CVE-2006-0875.md): Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the li (no CVSS)
- [CVE-2006-0876](https://cve.now/CVE-2006-0876.md): POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving character s (no CVSS)
- [CVE-2006-0877](https://cve.now/CVE-2006-0877.md): Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable. (no CVSS)
- [CVE-2006-0878](https://cve.now/CVE-2006-0878.md): Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by cla (no CVSS)
- [CVE-2006-0879](https://cve.now/CVE-2006-0879.md): SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspe (no CVSS)
- [CVE-2006-0880](https://cve.now/CVE-2006-0880.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-0881](https://cve.now/CVE-2006-0881.md): Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register\_globals is enabled, allow re (no CVSS)
- [CVE-2006-0882](https://cve.now/CVE-2006-0882.md): Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the (no CVSS)
- [CVE-2005-2934](https://cve.now/CVE-2005-2934.md): Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2005-3630](https://cve.now/CVE-2005-3630.md): Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME (no CVSS)
- [CVE-2006-0188](https://cve.now/CVE-2006-0188.md): webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right (no CVSS)
- [CVE-2006-0195](https://cve.now/CVE-2006-0195.md): Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) (no CVSS)
- [CVE-2006-0300](https://cve.now/CVE-2006-0300.md): Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly exe (no CVSS)
- [CVE-2006-0377](https://cve.now/CVE-2006-0377.md): CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.