# CVEs published 2006-05-05

36 CVEs were published on May 5, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4797](https://cve.now/CVE-2005-4797.md): Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary fi (no CVSS)
- [CVE-2005-4795](https://cve.now/CVE-2005-4795.md): Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Japanese locale, allows (no CVSS)
- [CVE-2005-4796](https://cve.now/CVE-2005-4796.md): Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors re (no CVSS)
- [CVE-2006-2221](https://cve.now/CVE-2006-2221.md): A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1\_1 and ear (no CVSS)
- [CVE-2006-2222](https://cve.now/CVE-2006-2222.md): Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via (no CVSS)
- [CVE-2006-2223](https://cve.now/CVE-2006-2223.md): RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or M (no CVSS)
- [CVE-2006-2224](https://cve.now/CVE-2006-2224.md): RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to m (no CVSS)
- [CVE-2006-2225](https://cve.now/CVE-2006-2225.md): Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER comman (no CVSS)
- [CVE-2006-2226](https://cve.now/CVE-2006-2226.md): Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argum (no CVSS)
- [CVE-2006-2227](https://cve.now/CVE-2006-2227.md): Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-2228](https://cve.now/CVE-2006-2228.md): Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-2229](https://cve.now/CVE-2006-2229.md): OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TC (no CVSS)
- [CVE-2006-2230](https://cve.now/CVE-2006-2230.md): Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format st (no CVSS)
- [CVE-2006-2231](https://cve.now/CVE-2006-2231.md): Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attacker (no CVSS)
- [CVE-2006-2232](https://cve.now/CVE-2006-2232.md): Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-2233](https://cve.now/CVE-2006-2233.md): Buffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2.50209, allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-2234](https://cve.now/CVE-2006-2234.md): Multiple cross-site scripting (XSS) vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via (1 (no CVSS)
- [CVE-2006-2235](https://cve.now/CVE-2006-2235.md): CodeMunkyX (aka free-php.net) Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain (no CVSS)
- [CVE-2006-1052](https://cve.now/CVE-2006-1052.md): The selinux\_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID (no CVSS)
- [CVE-2006-1516](https://cve.now/CVE-2006-1516.md): The check\_connection function in sql\_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attacker (no CVSS)
- [CVE-2006-1517](https://cve.now/CVE-2006-1517.md): sql\_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information (no CVSS)
- [CVE-2006-1518](https://cve.now/CVE-2006-1518.md): Buffer overflow in the open\_table function in sql\_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2006-2203](https://cve.now/CVE-2006-2203.md): Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of att (no CVSS)
- [CVE-2006-2204](https://cve.now/CVE-2006-2204.md): SQL injection vulnerability in the topic deletion functionality (post\_delete function in func\_mod.php) for Invision Power Board 2.1.5 allows (no CVSS)
- [CVE-2006-2205](https://cve.now/CVE-2006-2205.md): The audio\_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to cha (no CVSS)
- [CVE-2006-2206](https://cve.now/CVE-2006-2206.md): The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote a (no CVSS)
- [CVE-2006-2208](https://cve.now/CVE-2006-2208.md): Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-2209](https://cve.now/CVE-2006-2209.md): Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-2210](https://cve.now/CVE-2006-2210.md): Cross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2006-2211](https://cve.now/CVE-2006-2211.md): Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via th (no CVSS)
- [CVE-2006-2212](https://cve.now/CVE-2006-2212.md): Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) (no CVSS)
- [CVE-2006-2213](https://cve.now/CVE-2006-2213.md): Hostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an unspecified value in the key\_data\_length fi (no CVSS)
- [CVE-2006-2214](https://cve.now/CVE-2006-2214.md): Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the session (no CVSS)
- [CVE-2006-2216](https://cve.now/CVE-2006-2216.md): Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1) (no CVSS)
- [CVE-2006-2217](https://cve.now/CVE-2006-2217.md): SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid param (no CVSS)
- [CVE-2006-2218](https://cve.now/CVE-2006-2218.md): Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "except (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.