# CVEs published 2006-06-02

42 CVEs were published on June 2, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2789](https://cve.now/CVE-2006-2789.md): Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a d (no CVSS)
- [CVE-2006-2790](https://cve.now/CVE-2006-2790.md): A package component in Sun Storage Automated Diagnostic Environment (StorADE) 2.4 uses world-writable permissions for certain critical files (no CVSS)
- [CVE-2006-2788](https://cve.now/CVE-2006-2788.md): Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) a (no CVSS)
- [CVE-2006-2786](https://cve.now/CVE-2006-2786.md): HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote (no CVSS)
- [CVE-2006-2787](https://cve.now/CVE-2006-2787.md): EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the val (no CVSS)
- [CVE-2006-2779](https://cve.now/CVE-2006-2779.md): Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary co (no CVSS)
- [CVE-2006-2780](https://cve.now/CVE-2006-2780.md): Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly (no CVSS)
- [CVE-2006-2781](https://cve.now/CVE-2006-2781.md): Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a (no CVSS)
- [CVE-2006-2782](https://cve.now/CVE-2006-2782.md): Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by insertin (no CVSS)
- [CVE-2006-2783](https://cve.now/CVE-2006-2783.md): Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the pa (no CVSS)
- [CVE-2006-2784](https://cve.now/CVE-2006-2784.md): The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking (no CVSS)
- [CVE-2006-2785](https://cve.now/CVE-2006-2785.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-2775](https://cve.now/CVE-2006-2775.md): Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which m (no CVSS)
- [CVE-2006-2776](https://cve.now/CVE-2006-2776.md): Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which all (no CVSS)
- [CVE-2006-2777](https://cve.now/CVE-2006-2777.md): Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by (no CVSS)
- [CVE-2006-2778](https://cve.now/CVE-2006-2778.md): The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain (no CVSS)
- [CVE-2006-2662](https://cve.now/CVE-2006-2662.md): VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers t (no CVSS)
- [CVE-2006-2766](https://cve.now/CVE-2006-2766.md): Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possib (no CVSS)
- [CVE-2006-2767](https://cve.now/CVE-2006-2767.md): PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register\_globals is enabled, allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-2768](https://cve.now/CVE-2006-2768.md): PHP remote file inclusion vulnerability in METAjour 2.1, when register\_globals is enabled, allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-2769](https://cve.now/CVE-2006-2769.md): The HTTP Inspect preprocessor (http\_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriag (no CVSS)
- [CVE-2006-2770](https://cve.now/CVE-2006-2770.md): Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register\_globals is enabled, allows remote attackers t (no CVSS)
- [CVE-2006-2771](https://cve.now/CVE-2006-2771.md): admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitr (no CVSS)
- [CVE-2006-2772](https://cve.now/CVE-2006-2772.md): Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2006-2773](https://cve.now/CVE-2006-2773.md): admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arb (no CVSS)
- [CVE-2006-2774](https://cve.now/CVE-2006-2774.md): Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-3619](https://cve.now/CVE-2005-3619.md): Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 u (no CVSS)
- [CVE-2006-2654](https://cve.now/CVE-2006-2654.md): Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mount (no CVSS)
- [CVE-2006-2655](https://cve.now/CVE-2006-2655.md): The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, whic (no CVSS)
- [CVE-2006-2755](https://cve.now/CVE-2006-2755.md): Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-2756](https://cve.now/CVE-2006-2756.md): Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET request. (no CVSS)
- [CVE-2006-2757](https://cve.now/CVE-2006-2757.md): Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) st (no CVSS)
- [CVE-2006-2758](https://cve.now/CVE-2006-2758.md): Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded .. (no CVSS, org.mortbay.jetty:jetty)
- [CVE-2006-2759](https://cve.now/CVE-2006-2759.md): jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably (no CVSS, org.mortbay.jetty:jetty)
- [CVE-2006-2760](https://cve.now/CVE-2006-2760.md): SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid (no CVSS)
- [CVE-2006-2761](https://cve.now/CVE-2006-2761.md): SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP allows remote attackers (no CVSS)
- [CVE-2006-2762](https://cve.now/CVE-2006-2762.md): PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2006-2763](https://cve.now/CVE-2006-2763.md): SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a (no CVSS)
- [CVE-2006-2764](https://cve.now/CVE-2006-2764.md): Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript (no CVSS)
- [CVE-2006-2765](https://cve.now/CVE-2006-2765.md): Cross-site scripting (XSS) vulnerability in news\_information.php in Interlink Advantage allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2006-2308](https://cve.now/CVE-2006-2308.md): Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, (no CVSS)
- [CVE-2006-2309](https://cve.now/CVE-2006-2309.md): The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.