# CVEs published 2006-05-30

38 CVEs were published on May 30, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2663](https://cve.now/CVE-2006-2663.md): Multiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain (no CVSS)
- [CVE-2006-2664](https://cve.now/CVE-2006-2664.md): Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (no CVSS)
- [CVE-2006-2665](https://cve.now/CVE-2006-2665.md): PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-2666](https://cve.now/CVE-2006-2666.md): PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute ar (no CVSS)
- [CVE-2006-2667](https://cve.now/CVE-2006-2667.md): Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting (no CVSS)
- [CVE-2006-2668](https://cve.now/CVE-2006-2668.md): Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-2669](https://cve.now/CVE-2006-2669.md): Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2006-2670](https://cve.now/CVE-2006-2670.md): Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat (no CVSS)
- [CVE-2006-2671](https://cve.now/CVE-2006-2671.md): SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field. (no CVSS)
- [CVE-2006-2672](https://cve.now/CVE-2006-2672.md): Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-2673](https://cve.now/CVE-2006-2673.md): Cross-site scripting (XSS) vulnerability in search.html in Bulletin Board Elite-Board (E-Board) 1.1 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2006-2674](https://cve.now/CVE-2006-2674.md): Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2006-2675](https://cve.now/CVE-2006-2675.md): PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-2659](https://cve.now/CVE-2006-2659.md): libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving us (no CVSS)
- [CVE-2006-2661](https://cve.now/CVE-2006-2661.md): ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null de (no CVSS)
- [CVE-2006-2656](https://cve.now/CVE-2006-2656.md): Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-2632](https://cve.now/CVE-2006-2632.md): Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary we (no CVSS)
- [CVE-2006-2633](https://cve.now/CVE-2006-2633.md): Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated (no CVSS)
- [CVE-2006-2634](https://cve.now/CVE-2006-2634.md): Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2006-2635](https://cve.now/CVE-2006-2635.md): Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2006-2636](https://cve.now/CVE-2006-2636.md): newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the log (no CVSS)
- [CVE-2006-2637](https://cve.now/CVE-2006-2637.md): Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3) Smile Guestbook 1 a (no CVSS)
- [CVE-2006-2638](https://cve.now/CVE-2006-2638.md): SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the uName parameter. (no CVSS)
- [CVE-2006-2639](https://cve.now/CVE-2006-2639.md): Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject (no CVSS)
- [CVE-2006-2640](https://cve.now/CVE-2006-2640.md): Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers t (no CVSS)
- [CVE-2006-2641](https://cve.now/CVE-2006-2641.md): \*\* UNVERIFIABLE \*\* NOTE: this issue does not contain any verifiable or actionable details. (no CVSS)
- [CVE-2006-2642](https://cve.now/CVE-2006-2642.md): \*\* UNVERIFIABLE \*\* NOTE: this issue does not contain any verifiable or actionable details. (no CVSS)
- [CVE-2006-2643](https://cve.now/CVE-2006-2643.md): Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-2644](https://cve.now/CVE-2006-2644.md): AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to aw (no CVSS)
- [CVE-2006-2645](https://cve.now/CVE-2006-2645.md): PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2006-2646](https://cve.now/CVE-2006-2646.md): Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument th (no CVSS)
- [CVE-2006-2647](https://cve.now/CVE-2006-2647.md): Untrusted search path vulnerability in update\_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknow (no CVSS)
- [CVE-2006-2648](https://cve.now/CVE-2006-2648.md): Cross-site scripting (XSS) vulnerability in perform\_search.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML o (no CVSS)
- [CVE-2006-2649](https://cve.now/CVE-2006-2649.md): Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search\_cat.php, (c) search\_price.php, and (d) product\_details.php (no CVSS)
- [CVE-2006-2650](https://cve.now/CVE-2006-2650.md): SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-2651](https://cve.now/CVE-2006-2651.md): Cross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-2652](https://cve.now/CVE-2006-2652.md): Cross-site scripting (XSS) vulnerability in WikiNi 0.4.2 and earlier allows remote attackers to inject arbitrary HTML and web script by edit (no CVSS)
- [CVE-2006-2653](https://cve.now/CVE-2006-2653.md): Cross-site scripting (XSS) vulnerability in login\_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web sc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.