# CVEs published 2006-05-10

5 CVEs were published on May 10, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0994](https://cve.now/CVE-2006-0994.md): Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is (no CVSS)
- [CVE-2006-2298](https://cve.now/CVE-2006-2298.md): The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a deni (no CVSS)
- [CVE-2006-0993](https://cve.now/CVE-2006-0993.md): The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might (no CVSS)
- [CVE-2006-2297](https://cve.now/CVE-2006-2297.md): Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code (no CVSS)
- [CVE-2006-2082](https://cve.now/CVE-2006-2082.md): Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.