# CVEs published 2006-05-23

16 CVEs were published on May 23, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2002-2211](https://cve.now/CVE-2002-2211.md): BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a bi (no CVSS)
- [CVE-2002-2212](https://cve.now/CVE-2002-2212.md): The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers (no CVSS)
- [CVE-2002-2213](https://cve.now/CVE-2002-2213.md): The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attack (no CVSS)
- [CVE-2006-2551](https://cve.now/CVE-2006-2551.md): Unspecified vulnerability in the kernel in HP-UX B.11.00 allows local users to cause an unspecified denial of service via unknown vectors. (no CVSS)
- [CVE-2006-0747](https://cve.now/CVE-2006-0747.md): Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of (no CVSS)
- [CVE-2006-1861](https://cve.now/CVE-2006-1861.md): Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary (no CVSS)
- [CVE-2006-2540](https://cve.now/CVE-2006-2540.md): Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by (no CVSS)
- [CVE-2006-2541](https://cve.now/CVE-2006-2541.md): SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid paramet (no CVSS)
- [CVE-2006-2542](https://cve.now/CVE-2006-2542.md): xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable permissions, which allow (no CVSS)
- [CVE-2006-2543](https://cve.now/CVE-2006-2543.md): Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in jo (no CVSS)
- [CVE-2006-2544](https://cve.now/CVE-2006-2544.md): Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic\_quotes\_gpc disabled, allow remote attackers to execute arbitrary S (no CVSS)
- [CVE-2006-2545](https://cve.now/CVE-2006-2545.md): Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-2546](https://cve.now/CVE-2006-2546.md): A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator pa (no CVSS)
- [CVE-2006-2547](https://cve.now/CVE-2006-2547.md): Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbi (no CVSS)
- [CVE-2006-2548](https://cve.now/CVE-2006-2548.md): Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a po (no CVSS)
- [CVE-2006-2550](https://cve.now/CVE-2006-2550.md): perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executed (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.