# CVEs published 2006-06-27

46 CVEs were published on June 27, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0456](https://cve.now/CVE-2006-0456.md): The strnlen\_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a deni (no CVSS)
- [CVE-2006-1469](https://cve.now/CVE-2006-1469.md): Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibl (no CVSS)
- [CVE-2006-1470](https://cve.now/CVE-2006-1470.md): OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that t (no CVSS)
- [CVE-2006-1471](https://cve.now/CVE-2006-1471.md): Format string vulnerability in the CF\_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary co (no CVSS)
- [CVE-2006-1468](https://cve.now/CVE-2006-1468.md): Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and (no CVSS)
- [CVE-2006-3223](https://cve.now/CVE-2006-3223.md): Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attacker (no CVSS)
- [CVE-2006-3258](https://cve.now/CVE-2006-3258.md): Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote (no CVSS)
- [CVE-2006-3259](https://cve.now/CVE-2006-3259.md): Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2006-3260](https://cve.now/CVE-2006-3260.md): Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-3261](https://cve.now/CVE-2006-3261.md): Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3262](https://cve.now/CVE-2006-3262.md): SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2006-3263](https://cve.now/CVE-2006-3263.md): SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2006-3264](https://cve.now/CVE-2006-3264.md): Cross-site scripting (XSS) vulnerability in mclient.cgi in Namo DeepSearch 4.5 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-3265](https://cve.now/CVE-2006-3265.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Qdig before 1.2.9.3, when register\_globals is enabled, allow remote atta (no CVSS)
- [CVE-2006-3266](https://cve.now/CVE-2006-3266.md): Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register\_globals is enabled, allow remote attacker (no CVSS)
- [CVE-2006-3267](https://cve.now/CVE-2006-3267.md): SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2006-2200](https://cve.now/CVE-2006-2200.md): Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a den (no CVSS)
- [CVE-2006-3253](https://cve.now/CVE-2006-3253.md): Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-3254](https://cve.now/CVE-2006-3254.md): SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-3255](https://cve.now/CVE-2006-3255.md): SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3256](https://cve.now/CVE-2006-3256.md): SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3257](https://cve.now/CVE-2006-3257.md): Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via uns (no CVSS)
- [CVE-2006-3250](https://cve.now/CVE-2006-3250.md): Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (no CVSS)
- [CVE-2006-3251](https://cve.now/CVE-2006-3251.md): Heap-based buffer overflow in the array\_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code (no CVSS)
- [CVE-2006-3252](https://cve.now/CVE-2006-3252.md): Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to e (no CVSS)
- [CVE-2006-3134](https://cve.now/CVE-2006-3134.md): Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to e (no CVSS)
- [CVE-2006-3230](https://cve.now/CVE-2006-3230.md): Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote (no CVSS)
- [CVE-2006-3231](https://cve.now/CVE-2006-3231.md): Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attacker (no CVSS)
- [CVE-2006-3232](https://cve.now/CVE-2006-3232.md): Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the "UserNameTok (no CVSS)
- [CVE-2006-3233](https://cve.now/CVE-2006-3233.md): Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, a (no CVSS)
- [CVE-2006-3234](https://cve.now/CVE-2006-3234.md): Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3235](https://cve.now/CVE-2006-3235.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-3236](https://cve.now/CVE-2006-3236.md): Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id p (no CVSS)
- [CVE-2006-3237](https://cve.now/CVE-2006-3237.md): Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inje (no CVSS)
- [CVE-2006-3238](https://cve.now/CVE-2006-3238.md): Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Membe (no CVSS)
- [CVE-2006-3239](https://cve.now/CVE-2006-3239.md): SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the User (no CVSS)
- [CVE-2006-3240](https://cve.now/CVE-2006-3240.md): Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-3241](https://cve.now/CVE-2006-3241.md): Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-3242](https://cve.now/CVE-2006-3242.md): Stack-based buffer overflow in the browse\_get\_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cau (no CVSS)
- [CVE-2006-3243](https://cve.now/CVE-2006-3243.md): SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2006-3244](https://cve.now/CVE-2006-3244.md): Multiple SQL injection vulnerabilities in Anthill 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ord (no CVSS)
- [CVE-2006-3245](https://cve.now/CVE-2006-3245.md): Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitr (no CVSS)
- [CVE-2006-3246](https://cve.now/CVE-2006-3246.md): Cross-site scripting (XSS) vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2006-3247](https://cve.now/CVE-2006-3247.md): Multiple cross-site scripting (XSS) vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbit (no CVSS)
- [CVE-2006-3249](https://cve.now/CVE-2006-3249.md): SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the pag (no CVSS)
- [CVE-2006-3229](https://cve.now/CVE-2006-3229.md): Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.