# CVEs published 2006-06-26 9 CVEs were published on June 26, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3011](https://cve.now/CVE-2006-3011.md): The error\_log function in basic\_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open\_basedir (no CVSS) - [CVE-2006-3228](https://cve.now/CVE-2006-3228.md): Buffer overflow in in\_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted . (no CVSS) - [CVE-2006-3224](https://cve.now/CVE-2006-3224.md): Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with a (no CVSS) - [CVE-2006-3225](https://cve.now/CVE-2006-3225.md): Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Upd (no CVSS) - [CVE-2006-3226](https://cve.now/CVE-2006-3226.md): Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTT (no CVSS) - [CVE-2006-3227](https://cve.now/CVE-2006-3227.md): Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to (no CVSS) - [CVE-2006-2196](https://cve.now/CVE-2006-2196.md): Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugi (no CVSS) - [CVE-2006-2310](https://cve.now/CVE-2006-2310.md): BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm f (no CVSS) - [CVE-2006-2311](https://cve.now/CVE-2006-2311.md): Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrar (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-06-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.