# CVEs published 2006-04-21

38 CVEs were published on April 21, 2006: 1 critical, 0 high. Days are UTC.

- [CVE-2006-1865](https://cve.now/CVE-2006-1865.md): Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject com (no CVSS)
- [CVE-2006-1977](https://cve.now/CVE-2006-1977.md): Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-1978](https://cve.now/CVE-2006-1978.md): SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the f (no CVSS)
- [CVE-2006-1979](https://cve.now/CVE-2006-1979.md): Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1980](https://cve.now/CVE-2006-1980.md): Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) qu (no CVSS)
- [CVE-2006-1981](https://cve.now/CVE-2006-1981.md): Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong (no CVSS)
- [CVE-2006-1982](https://cve.now/CVE-2006-1982.md): Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, al (no CVSS)
- [CVE-2006-1983](https://cve.now/CVE-2006-1983.md): Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute (no CVSS)
- [CVE-2006-1984](https://cve.now/CVE-2006-1984.md): Unspecified vulnerability in the \_cg\_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKi (no CVSS)
- [CVE-2006-1985](https://cve.now/CVE-2006-1985.md): Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attack (no CVSS)
- [CVE-2006-1986](https://cve.now/CVE-2006-1986.md): Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TAB (no CVSS)
- [CVE-2006-1987](https://cve.now/CVE-2006-1987.md): Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (no CVSS)
- [CVE-2006-1988](https://cve.now/CVE-2006-1988.md): The WebTextRenderer(WebInternal) \_CG\_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-1999-1588](https://cve.now/CVE-1999-1588.md): Buffer overflow in nlps\_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long s (CVSS 9.8)
- [CVE-2005-4787](https://cve.now/CVE-2005-4787.md): Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) a (no CVSS)
- [CVE-2006-1954](https://cve.now/CVE-2006-1954.md): SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows (no CVSS)
- [CVE-2006-1955](https://cve.now/CVE-2006-1955.md): PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versi (no CVSS)
- [CVE-2006-1956](https://cve.now/CVE-2006-1956.md): The com\_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parame (no CVSS)
- [CVE-2006-1957](https://cve.now/CVE-2006-1957.md): The com\_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibl (no CVSS)
- [CVE-2006-1958](https://cve.now/CVE-2006-1958.md): Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer (no CVSS)
- [CVE-2006-1959](https://cve.now/CVE-2006-1959.md): PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Serv (no CVSS)
- [CVE-2006-1960](https://cve.now/CVE-2006-1960.md): Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLS (no CVSS)
- [CVE-2006-1961](https://cve.now/CVE-2006-1961.md): Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (no CVSS)
- [CVE-2006-1962](https://cve.now/CVE-2006-1962.md): SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (no CVSS)
- [CVE-2006-1963](https://cve.now/CVE-2006-1963.md): Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbit (no CVSS)
- [CVE-2006-1964](https://cve.now/CVE-2006-1964.md): SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2006-1965](https://cve.now/CVE-2006-1965.md): Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-1966](https://cve.now/CVE-2006-1966.md): An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small synflood" to the SMT (no CVSS)
- [CVE-2006-1967](https://cve.now/CVE-2006-1967.md): Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack (no CVSS)
- [CVE-2006-1968](https://cve.now/CVE-2006-1968.md): Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal P (no CVSS)
- [CVE-2006-1969](https://cve.now/CVE-2006-1969.md): Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, dis (no CVSS)
- [CVE-2006-1970](https://cve.now/CVE-2006-1970.md): Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal (no CVSS)
- [CVE-2006-1971](https://cve.now/CVE-2006-1971.md): Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-1972](https://cve.now/CVE-2006-1972.md): Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1973](https://cve.now/CVE-2006-1973.md): Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session (no CVSS)
- [CVE-2006-1974](https://cve.now/CVE-2006-1974.md): SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-1975](https://cve.now/CVE-2006-1975.md): Cross-site scripting (XSS) vulnerability in guestbook\_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-1976](https://cve.now/CVE-2006-1976.md): Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows remote attackers to i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.