# CVEs published 2006-04-29 28 CVEs were published on April 29, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2004-2659](https://cve.now/CVE-2004-2659.md): Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to constr (no CVSS) - [CVE-2005-4792](https://cve.now/CVE-2005-4792.md): SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute ar (no CVSS) - [CVE-2005-4793](https://cve.now/CVE-2005-4793.md): Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before (no CVSS) - [CVE-2006-2084](https://cve.now/CVE-2006-2084.md): Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-2085](https://cve.now/CVE-2006-2085.md): Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 445 (no CVSS) - [CVE-2006-2086](https://cve.now/CVE-2006-2086.md): Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE de (no CVSS) - [CVE-2006-2087](https://cve.now/CVE-2006-2087.md): The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous (no CVSS) - [CVE-2006-2088](https://cve.now/CVE-2006-2088.md): Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject arbitrary (no CVSS) - [CVE-2006-2089](https://cve.now/CVE-2006-2089.md): Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2006-2090](https://cve.now/CVE-2006-2090.md): Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) i (no CVSS) - [CVE-2006-2091](https://cve.now/CVE-2006-2091.md): admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows remote attackers to obtain sensitive information via an invalid vwar\_root (no CVSS) - [CVE-2006-2092](https://cve.now/CVE-2006-2092.md): Unspecified vulnerability in HP StorageWorks Secure Path for Windows 4.0C-SP2 before 20060419 allows remote attackers to cause an unspecifie (no CVSS) - [CVE-2006-2093](https://cve.now/CVE-2006-2093.md): Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL scrip (no CVSS) - [CVE-2006-2094](https://cve.now/CVE-2006-2094.md): Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security S (no CVSS) - [CVE-2006-2095](https://cve.now/CVE-2006-2095.md): Phex before 2.8.6 allows remote attackers to cause a denial of service (application hang) by initiating multiple chat requests to a single u (no CVSS) - [CVE-2006-2096](https://cve.now/CVE-2006-2096.md): plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) ye (no CVSS) - [CVE-2006-2097](https://cve.now/CVE-2006-2097.md): SQL injection vulnerability in func\_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands vi (no CVSS) - [CVE-2006-2098](https://cve.now/CVE-2006-2098.md): PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary PHP code via (1) READ (no CVSS) - [CVE-2006-2099](https://cve.now/CVE-2006-2099.md): Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2100](https://cve.now/CVE-2006-2100.md): Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2101](https://cve.now/CVE-2006-2101.md): Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2102](https://cve.now/CVE-2006-2102.md): Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (no CVSS) - [CVE-2006-2103](https://cve.now/CVE-2006-2103.md): SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via (no CVSS) - [CVE-2006-2104](https://cve.now/CVE-2006-2104.md): Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attackers to inject arbitr (no CVSS) - [CVE-2006-2105](https://cve.now/CVE-2006-2105.md): Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." seque (no CVSS) - [CVE-2006-2106](https://cve.now/CVE-2006-2106.md): Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-2107](https://cve.now/CVE-2006-2107.md): Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code (no CVSS) - [CVE-2006-2108](https://cve.now/CVE-2006-2108.md): parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a long request, possibl (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-04-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.