# CVEs published 2006-05-04 29 CVEs were published on May 4, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2202](https://cve.now/CVE-2006-2202.md): SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album pa (no CVSS) - [CVE-2006-2201](https://cve.now/CVE-2006-2201.md): Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP co (no CVSS) - [CVE-2006-2163](https://cve.now/CVE-2006-2163.md): Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2006-2164](https://cve.now/CVE-2006-2164.md): Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands v (no CVSS) - [CVE-2006-2165](https://cve.now/CVE-2006-2165.md): Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2006-2166](https://cve.now/CVE-2006-2166.md): Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced (no CVSS) - [CVE-2006-2167](https://cve.now/CVE-2006-2167.md): Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary (no CVSS) - [CVE-2006-2168](https://cve.now/CVE-2006-2168.md): FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1. (no CVSS) - [CVE-2006-2169](https://cve.now/CVE-2006-2169.md): RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reve (no CVSS) - [CVE-2006-2170](https://cve.now/CVE-2006-2170.md): Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonst (no CVSS) - [CVE-2006-2171](https://cve.now/CVE-2006-2171.md): Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the In (no CVSS) - [CVE-2006-2172](https://cve.now/CVE-2006-2172.md): Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) and possibly execute ar (no CVSS) - [CVE-2006-2173](https://cve.now/CVE-2006-2173.md): Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbit (no CVSS) - [CVE-2006-2174](https://cve.now/CVE-2006-2174.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/server\_day\_stats.php in Virtual Hosting Control System (VHCS) allow remote atta (no CVSS) - [CVE-2006-2175](https://cve.now/CVE-2006-2175.md): PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2006-2176](https://cve.now/CVE-2006-2176.md): Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-2177](https://cve.now/CVE-2006-2177.md): Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2006-2178](https://cve.now/CVE-2006-2178.md): Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS) - [CVE-2006-2179](https://cve.now/CVE-2006-2179.md): Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID paramete (no CVSS) - [CVE-2006-2180](https://cve.now/CVE-2006-2180.md): Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary (no CVSS) - [CVE-2006-2181](https://cve.now/CVE-2006-2181.md): Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2006-2182](https://cve.now/CVE-2006-2182.md): Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow re (no CVSS) - [CVE-2006-2183](https://cve.now/CVE-2006-2183.md): Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and (no CVSS) - [CVE-2006-2184](https://cve.now/CVE-2006-2184.md): Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-2186](https://cve.now/CVE-2006-2186.md): zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/defau (no CVSS) - [CVE-2006-2187](https://cve.now/CVE-2006-2187.md): Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-2188](https://cve.now/CVE-2006-2188.md): Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-2189](https://cve.now/CVE-2006-2189.md): SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword p (no CVSS) - [CVE-2006-2190](https://cve.now/CVE-2006-2190.md): Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary w (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-05-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.