# CVEs published 2006-05-11

8 CVEs were published on May 11, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2300](https://cve.now/CVE-2006-2300.md): Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to (no CVSS)
- [CVE-2006-2301](https://cve.now/CVE-2006-2301.md): SQL injection vulnerability in admin\_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the (1) Lo (no CVSS)
- [CVE-2006-2302](https://cve.now/CVE-2006-2302.md): SQL injection vulnerability in admin\_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Logi (no CVSS)
- [CVE-2006-2303](https://cve.now/CVE-2006-2303.md): Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-2304](https://cve.now/CVE-2006-2304.md): Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow remote attackers to ex (no CVSS)
- [CVE-2006-2305](https://cve.now/CVE-2006-2305.md): Multiple cross-site scripting (XSS) vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script or HTML via the (1) fo (no CVSS)
- [CVE-2006-2306](https://cve.now/CVE-2006-2306.md): Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-2307](https://cve.now/CVE-2006-2307.md): Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.