# CVEs published 2006-06-05 26 CVEs were published on June 5, 2006: 1 critical, 0 high. Days are UTC. - [CVE-2006-2828](https://cve.now/CVE-2006-2828.md): Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpb (no CVSS) - [CVE-2006-2829](https://cve.now/CVE-2006-2829.md): Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated use (no CVSS) - [CVE-2006-2830](https://cve.now/CVE-2006-2830.md): Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cau (no CVSS) - [CVE-2005-1976](https://cve.now/CVE-2005-1976.md): Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow us (no CVSS) - [CVE-2006-2806](https://cve.now/CVE-2006-2806.md): The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU con (no CVSS) - [CVE-2006-2807](https://cve.now/CVE-2006-2807.md): ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly (no CVSS) - [CVE-2006-2808](https://cve.now/CVE-2006-2808.md): Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-2809](https://cve.now/CVE-2006-2809.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-2810](https://cve.now/CVE-2006-2810.md): Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2006-2811](https://cve.now/CVE-2006-2811.md): Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS) - [CVE-2006-2812](https://cve.now/CVE-2006-2812.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers t (no CVSS) - [CVE-2006-2813](https://cve.now/CVE-2006-2813.md): Directory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-2814](https://cve.now/CVE-2006-2814.md): Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attacke (no CVSS) - [CVE-2006-2815](https://cve.now/CVE-2006-2815.md): Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com\_simpleboard), as used in (no CVSS) - [CVE-2006-2816](https://cve.now/CVE-2006-2816.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2006-2817](https://cve.now/CVE-2006-2817.md): SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2006-2818](https://cve.now/CVE-2006-2818.md): PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to execute arbitrary PH (no CVSS) - [CVE-2006-2819](https://cve.now/CVE-2006-2819.md): PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP c (no CVSS) - [CVE-2006-2820](https://cve.now/CVE-2006-2820.md): Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-2821](https://cve.now/CVE-2006-2821.md): Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-2822](https://cve.now/CVE-2006-2822.md): SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execut (no CVSS) - [CVE-2006-2823](https://cve.now/CVE-2006-2823.md): Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which a (no CVSS) - [CVE-2006-2824](https://cve.now/CVE-2006-2824.md): Logicalware MailManager before 2.0.10 does not remove 0xc8 0x27 (0xc8 followed by a single-quote character) from the data stream to the serv (no CVSS) - [CVE-2006-2825](https://cve.now/CVE-2006-2825.md): cPanel does not automatically synchronize the PHP open\_basedir configuration directive between the main server and virtual hosts that share (no CVSS) - [CVE-2006-2826](https://cve.now/CVE-2006-2826.md): SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2006-2827](https://cve.now/CVE-2006-2827.md): SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitra (CVSS 9.8) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-06-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.