# CVEs published 2006-05-20 9 CVEs were published on May 20, 2006: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2006-2494](https://cve.now/CVE-2006-2494.md): Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file. (no CVSS) - [CVE-2006-2495](https://cve.now/CVE-2006-2495.md): Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unau (no CVSS) - [CVE-2006-2496](https://cve.now/CVE-2006-2496.md): Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possib (no CVSS) - [CVE-2006-2497](https://cve.now/CVE-2006-2497.md): Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS) - [CVE-2006-2498](https://cve.now/CVE-2006-2498.md): Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post\_ic (no CVSS) - [CVE-2006-2499](https://cve.now/CVE-2006-2499.md): SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2006-2500](https://cve.now/CVE-2006-2500.md): Cross-site scripting (XSS) vulnerability in add\_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-2501](https://cve.now/CVE-2006-2501.md): Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Appl (no CVSS) - [CVE-2006-2492](https://cve.now/CVE-2006-2492.md): Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allow (CVSS 8.8, KEV) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-05-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.