# CVEs published 2006-06-14

8 CVEs were published on June 14, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3016](https://cve.now/CVE-2006-3016.md): Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session (no CVSS)
- [CVE-2006-3017](https://cve.now/CVE-2006-3017.md): zend\_hash\_del\_key\_or\_index in zend\_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend\_hash\_del to delete the wrong element, whic (no CVSS)
- [CVE-2006-3018](https://cve.now/CVE-2006-3018.md): Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap c (no CVSS)
- [CVE-2002-2214](https://cve.now/CVE-2002-2214.md): The php\_if\_imap\_mime\_header\_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2002-2215](https://cve.now/CVE-2002-2215.md): The imap\_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail m (no CVSS)
- [CVE-2003-1302](https://cve.now/CVE-2003-1302.md): The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) F (no CVSS)
- [CVE-2003-1303](https://cve.now/CVE-2003-1303.md): Buffer overflow in the imap\_fetch\_overview function in the IMAP functionality (php\_imap.c) in PHP before 4.3.3 allows remote attackers to ca (no CVSS)
- [CVE-2006-3015](https://cve.now/CVE-2006-3015.md): Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.