# CVEs published 2006-04-04

15 CVEs were published on April 4, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2002-2210](https://cve.now/CVE-2002-2210.md): The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME (no CVSS)
- [CVE-2006-0559](https://cve.now/CVE-2006-0559.md): Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2006-1058](https://cve.now/CVE-2006-1058.md): BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password (no CVSS)
- [CVE-2006-1601](https://cve.now/CVE-2006-1601.md): Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbit (no CVSS)
- [CVE-2006-1602](https://cve.now/CVE-2006-1602.md): PHP remote file inclusion vulnerability in includes/functions\_common.php in the VWar Account module (vWar\_Account) in PHPNuke Clan 3.0.1 all (no CVSS)
- [CVE-2006-1603](https://cve.now/CVE-2006-1603.md): Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2006-1604](https://cve.now/CVE-2006-1604.md): Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not (no CVSS)
- [CVE-2006-1605](https://cve.now/CVE-2006-1605.md): Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unkno (no CVSS)
- [CVE-2006-1606](https://cve.now/CVE-2006-1606.md): Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors. (no CVSS)
- [CVE-2006-1607](https://cve.now/CVE-2006-1607.md): Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors. (no CVSS)
- [CVE-2006-1609](https://cve.now/CVE-2006-1609.md): Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a d (no CVSS)
- [CVE-2006-1610](https://cve.now/CVE-2006-1610.md): PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP (no CVSS)
- [CVE-2006-1611](https://cve.now/CVE-2006-1611.md): Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an (no CVSS)
- [CVE-2006-1612](https://cve.now/CVE-2006-1612.md): Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1613](https://cve.now/CVE-2006-1613.md): Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.