# CVEs published 2006-05-03

14 CVEs were published on May 3, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1527](https://cve.now/CVE-2006-1527.md): The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown (no CVSS)
- [CVE-2006-2162](https://cve.now/CVE-2006-2162.md): Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative (no CVSS)
- [CVE-2006-2149](https://cve.now/CVE-2006-2149.md): PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register\_globals is enabled, (no CVSS)
- [CVE-2006-2150](https://cve.now/CVE-2006-2150.md): PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary file (no CVSS)
- [CVE-2006-2151](https://cve.now/CVE-2006-2151.md): PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register\_globals is enabled, allows remote a (no CVSS)
- [CVE-2006-2152](https://cve.now/CVE-2006-2152.md): PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register\_globals is enable (no CVSS)
- [CVE-2006-2153](https://cve.now/CVE-2006-2153.md): Cross-site scripting (XSS) vulnerability in HTM\_PASSWD in DirectAdmin Hosting Management allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-2154](https://cve.now/CVE-2006-2154.md): EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, w (no CVSS)
- [CVE-2006-2155](https://cve.now/CVE-2006-2155.md): EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by (no CVSS)
- [CVE-2006-2156](https://cve.now/CVE-2006-2156.md): Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. (no CVSS)
- [CVE-2006-2157](https://cve.now/CVE-2006-2157.md): SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-2158](https://cve.now/CVE-2006-2158.md): Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register\_globals is enabled, allow (no CVSS)
- [CVE-2006-2159](https://cve.now/CVE-2006-2159.md): CRLF injection vulnerability in help.php in Russcom Network Loginphp allows remote attackers to spoof e-mails and inject MIME headers via CR (no CVSS)
- [CVE-2006-2160](https://cve.now/CVE-2006-2160.md): Cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) allows remote attackers to inject arbitrary web scri (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.