# CVEs published 2006-05-25

19 CVEs were published on May 25, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2607](https://cve.now/CVE-2006-2607.md): do\_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root priv (no CVSS)
- [CVE-2005-4804](https://cve.now/CVE-2005-4804.md): Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR (no CVSS)
- [CVE-2005-4805](https://cve.now/CVE-2005-4805.md): Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platf (no CVSS)
- [CVE-2005-4806](https://cve.now/CVE-2005-4806.md): Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of ser (no CVSS)
- [CVE-2006-2444](https://cve.now/CVE-2006-2444.md): The snmp\_trap\_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2006-2581](https://cve.now/CVE-2006-2581.md): Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-2582](https://cve.now/CVE-2006-2582.md): The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors. (no CVSS, rwiki)
- [CVE-2006-2583](https://cve.now/CVE-2006-2583.md): PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-2584](https://cve.now/CVE-2006-2584.md): Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-2585](https://cve.now/CVE-2006-2585.md): SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. (no CVSS)
- [CVE-2006-2586](https://cve.now/CVE-2006-2586.md): Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the (no CVSS)
- [CVE-2006-2587](https://cve.now/CVE-2006-2587.md): Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Ar (no CVSS)
- [CVE-2006-2588](https://cve.now/CVE-2006-2588.md): Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension. (no CVSS)
- [CVE-2006-2589](https://cve.now/CVE-2006-2589.md): SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-2590](https://cve.now/CVE-2006-2590.md): SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. (no CVSS)
- [CVE-2006-2591](https://cve.now/CVE-2006-2591.md): Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exploit". (no CVSS)
- [CVE-2006-2592](https://cve.now/CVE-2006-2592.md): Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized (no CVSS)
- [CVE-2006-2605](https://cve.now/CVE-2006-2605.md): Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the ch (no CVSS)
- [CVE-2006-2606](https://cve.now/CVE-2006-2606.md): Cross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web scrip (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.