# CVEs published 2006-06-29

28 CVEs were published on June 29, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1467](https://cve.now/CVE-2006-1467.md): Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remo (no CVSS)
- [CVE-2006-3115](https://cve.now/CVE-2006-3115.md): SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2006-3116](https://cve.now/CVE-2006-3116.md): Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in (no CVSS)
- [CVE-2006-3316](https://cve.now/CVE-2006-3316.md): Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phprai (no CVSS)
- [CVE-2006-3317](https://cve.now/CVE-2006-3317.md): PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid\_dir para (no CVSS)
- [CVE-2006-3318](https://cve.now/CVE-2006-3318.md): SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when the authorization type is phpraid, allows re (no CVSS)
- [CVE-2006-3312](https://cve.now/CVE-2006-3312.md): Multiple cross-site scripting (XSS) vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and earlier allow remote attackers to inject ar (no CVSS)
- [CVE-2006-3313](https://cve.now/CVE-2006-3313.md): Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-3314](https://cve.now/CVE-2006-3314.md): PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to exec (no CVSS)
- [CVE-2006-3315](https://cve.now/CVE-2006-3315.md): PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to exec (no CVSS)
- [CVE-2006-3268](https://cve.now/CVE-2006-3268.md): Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic acces (no CVSS)
- [CVE-2006-3293](https://cve.now/CVE-2006-3293.md): parse\_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) via empty IRC CTCP NOTI (no CVSS)
- [CVE-2006-3294](https://cve.now/CVE-2006-3294.md): PHP remote file inclusion vulnerability in mod\_cbsms\_messages.php in CBSMS Mambo Module 1.0 and earlier, when register\_globals is enabled, a (no CVSS)
- [CVE-2006-3295](https://cve.now/CVE-2006-3295.md): Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-3296](https://cve.now/CVE-2006-3296.md): SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset param (no CVSS)
- [CVE-2006-3297](https://cve.now/CVE-2006-3297.md): Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-3298](https://cve.now/CVE-2006-3298.md): Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII char (no CVSS)
- [CVE-2006-3299](https://cve.now/CVE-2006-3299.md): Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-3300](https://cve.now/CVE-2006-3300.md): PHP remote file inclusion vulnerability in sms\_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-3301](https://cve.now/CVE-2006-3301.md): Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3302](https://cve.now/CVE-2006-3302.md): PHP remote file inclusion vulnerability in mod\_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register\_globals is enabled, allows rem (no CVSS)
- [CVE-2006-3303](https://cve.now/CVE-2006-3303.md): Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-3304](https://cve.now/CVE-2006-3304.md): SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn pa (no CVSS)
- [CVE-2006-3305](https://cve.now/CVE-2006-3305.md): Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject arbit (no CVSS)
- [CVE-2006-3306](https://cve.now/CVE-2006-3306.md): Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, (no CVSS)
- [CVE-2006-3307](https://cve.now/CVE-2006-3307.md): Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitr (no CVSS)
- [CVE-2006-3308](https://cve.now/CVE-2006-3308.md): Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors vi (no CVSS)
- [CVE-2006-3309](https://cve.now/CVE-2006-3309.md): SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.