# CVEs published 2006-05-15

22 CVEs were published on May 15, 2006: 0 critical, 1 high. Days are UTC.

- [CVE-2005-4799](https://cve.now/CVE-2005-4799.md): Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inj (no CVSS)
- [CVE-2005-4800](https://cve.now/CVE-2005-4800.md): Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administra (no CVSS)
- [CVE-2005-4801](https://cve.now/CVE-2005-4801.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers (no CVSS)
- [CVE-2006-2359](https://cve.now/CVE-2006-2359.md): Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-2360](https://cve.now/CVE-2006-2360.md): SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2006-2361](https://cve.now/CVE-2006-2361.md): PHP remote file inclusion vulnerability in pafiledb\_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allow (no CVSS)
- [CVE-2006-2362](https://cve.now/CVE-2006-2362.md): Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows con (CVSS 7.3)
- [CVE-2006-2363](https://cve.now/CVE-2006-2363.md): SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-2364](https://cve.now/CVE-2006-2364.md): Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject (no CVSS)
- [CVE-2006-2365](https://cve.now/CVE-2006-2365.md): Cross-site scripting (XSS) vulnerability in a\_login.php in Vizra allows remote attackers to inject arbitrary web script or HTML via the mess (no CVSS)
- [CVE-2006-2366](https://cve.now/CVE-2006-2366.md): ircp\_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows us (no CVSS)
- [CVE-2006-2367](https://cve.now/CVE-2006-2367.md): Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.0 and 1.1 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2006-2368](https://cve.now/CVE-2006-2368.md): Cross-site scripting (XSS) vulnerability in index.php in Clansys (aka Clanpage System) 1.1 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2006-2369](https://cve.now/CVE-2006-2369.md): RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authenticat (no CVSS)
- [CVE-2006-2351](https://cve.now/CVE-2006-2351.md): Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote (no CVSS)
- [CVE-2006-2352](https://cve.now/CVE-2006-2352.md): Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote (no CVSS)
- [CVE-2006-2353](https://cve.now/CVE-2006-2353.md): NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirec (no CVSS)
- [CVE-2006-2354](https://cve.now/CVE-2006-2354.md): NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages (no CVSS)
- [CVE-2006-2355](https://cve.now/CVE-2006-2355.md): Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information vi (no CVSS)
- [CVE-2006-2356](https://cve.now/CVE-2006-2356.md): NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtai (no CVSS)
- [CVE-2006-2357](https://cve.now/CVE-2006-2357.md): Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a tra (no CVSS)
- [CVE-2006-2358](https://cve.now/CVE-2006-2358.md): Multiple cross-site scripting (XSS) vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.