# CVEs published 2006-05-16 31 CVEs were published on May 16, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2405](https://cve.now/CVE-2006-2405.md): Directory traversal vulnerability in unb\_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, when register\_globals (no CVSS) - [CVE-2006-2406](https://cve.now/CVE-2006-2406.md): Directory traversal vulnerability in bb\_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when registe (no CVSS) - [CVE-2006-2407](https://cve.now/CVE-2006-2407.md): Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Fre (no CVSS) - [CVE-2006-2408](https://cve.now/CVE-2006-2408.md): Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged (no CVSS) - [CVE-2006-2409](https://cve.now/CVE-2006-2409.md): Format string vulnerability in the raydium\_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitr (no CVSS) - [CVE-2006-2410](https://cve.now/CVE-2006-2410.md): raydium\_network\_netcall\_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2006-2411](https://cve.now/CVE-2006-2411.md): Buffer overflow in raydium\_network\_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to execute arb (no CVSS) - [CVE-2006-2412](https://cve.now/CVE-2006-2412.md): The raydium\_network\_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service (no CVSS) - [CVE-2006-2413](https://cve.now/CVE-2006-2413.md): GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an empty UDP da (no CVSS) - [CVE-2006-2414](https://cve.now/CVE-2006-2414.md): Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent di (no CVSS) - [CVE-2006-2415](https://cve.now/CVE-2006-2415.md): Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-2416](https://cve.now/CVE-2006-2416.md): SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to execute arbitrary SQL commands via a cookie a (no CVSS) - [CVE-2006-2417](https://cve.now/CVE-2006-2417.md): Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-2418](https://cve.now/CVE-2006-2418.md): Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web s (no CVSS) - [CVE-2006-2419](https://cve.now/CVE-2006-2419.md): Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2006-2420](https://cve.now/CVE-2006-2420.md): Bugzilla 2.20rc1 through 2.20 and 2.21.1, when using RSS 1.0, allows remote attackers to conduct cross-site scripting (XSS) attacks via a ti (no CVSS) - [CVE-2006-2390](https://cve.now/CVE-2006-2390.md): Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTML via the vname para (no CVSS) - [CVE-2006-2391](https://cve.now/CVE-2006-2391.md): Buffer overflow in EMC Retrospect Client 5.1 through 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute a (no CVSS) - [CVE-2006-2392](https://cve.now/CVE-2006-2392.md): PHP remote file inclusion vulnerability in public\_includes/pub\_popup/popup\_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote atta (no CVSS) - [CVE-2006-2393](https://cve.now/CVE-2006-2393.md): The client\_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long (no CVSS) - [CVE-2006-2394](https://cve.now/CVE-2006-2394.md): Cross-site scripting (XSS) vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2006-2395](https://cve.now/CVE-2006-2395.md): PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Studio 3.5.4 and earlie (no CVSS) - [CVE-2006-2396](https://cve.now/CVE-2006-2396.md): Cross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter. (no CVSS) - [CVE-2006-2397](https://cve.now/CVE-2006-2397.md): Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-2398](https://cve.now/CVE-2006-2398.md): Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-2399](https://cve.now/CVE-2006-2399.md): Stack-based buffer overflow in the ServerNetworking::incoming\_client\_data function in servnet.cpp in Outgun 1.0.3 bot 2 and earlier allows r (no CVSS) - [CVE-2006-2400](https://cve.now/CVE-2006-2400.md): The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service (game interru (no CVSS) - [CVE-2006-2401](https://cve.now/CVE-2006-2401.md): The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service (application (no CVSS) - [CVE-2006-2402](https://cve.now/CVE-2006-2402.md): Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change the (no CVSS) - [CVE-2006-2403](https://cve.now/CVE-2006-2403.md): Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors. (no CVSS) - [CVE-2006-2404](https://cve.now/CVE-2006-2404.md): Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-05-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.