# CVEs published 2006-05-02 18 CVEs were published on May 2, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-1526](https://cve.now/CVE-2006-1526.md): Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as (no CVSS) - [CVE-2006-2148](https://cve.now/CVE-2006-2148.md): Multiple buffer overflows in client.c in CGI:IRC (CGIIRC) before 0.5.8 might allow remote attackers to execute arbitrary code via (1) cookie (no CVSS) - [CVE-2006-2147](https://cve.now/CVE-2006-2147.md): resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is granted by using "usb:\ (no CVSS) - [CVE-2005-4794](https://cve.now/CVE-2005-4794.md): Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cau (no CVSS) - [CVE-2006-2109](https://cve.now/CVE-2006-2109.md): Cross-site scripting (XSS) vulnerability in the parse\_query\_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly oth (no CVSS) - [CVE-2006-2134](https://cve.now/CVE-2006-2134.md): PHP remote file inclusion vulnerability in /includes/kb\_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attack (no CVSS) - [CVE-2006-2135](https://cve.now/CVE-2006-2135.md): SQL injection vulnerability in login.php in Ruperts News allows remote attackers to execute arbitrary SQL commands via the username paramete (no CVSS) - [CVE-2006-2136](https://cve.now/CVE-2006-2136.md): SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter. (no CVSS) - [CVE-2006-2137](https://cve.now/CVE-2006-2137.md): PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-2138](https://cve.now/CVE-2006-2138.md): Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2006-2139](https://cve.now/CVE-2006-2139.md): Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL commands via the (1) name pa (no CVSS) - [CVE-2006-2140](https://cve.now/CVE-2006-2140.md): Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via t (no CVSS) - [CVE-2006-2141](https://cve.now/CVE-2006-2141.md): Cross-site scripting (XSS) vulnerability in popup\_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to in (no CVSS) - [CVE-2006-2142](https://cve.now/CVE-2006-2142.md): PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary (no CVSS) - [CVE-2006-2143](https://cve.now/CVE-2006-2143.md): Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via J (no CVSS) - [CVE-2006-2144](https://cve.now/CVE-2006-2144.md): PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2006-2145](https://cve.now/CVE-2006-2145.md): Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) topi (no CVSS) - [CVE-2006-2146](https://cve.now/CVE-2006-2146.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTM (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-05-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.