# CVEs published 2006-07-03

14 CVEs were published on July 3, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3344](https://cve.now/CVE-2006-3344.md): Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug (no CVSS)
- [CVE-2006-3345](https://cve.now/CVE-2006-3345.md): Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-3346](https://cve.now/CVE-2006-3346.md): SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grp\_id paramet (no CVSS)
- [CVE-2006-3347](https://cve.now/CVE-2006-3347.md): SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2006-3348](https://cve.now/CVE-2006-3348.md): Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-3349](https://cve.now/CVE-2006-3349.md): Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in (1) (no CVSS)
- [CVE-2006-3337](https://cve.now/CVE-2006-3337.md): Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers to (no CVSS)
- [CVE-2006-3338](https://cve.now/CVE-2006-3338.md): Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via uns (no CVSS)
- [CVE-2006-3339](https://cve.now/CVE-2006-3339.md): secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipu (no CVSS)
- [CVE-2006-3340](https://cve.now/CVE-2006-3340.md): Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register\_globals is enabled, allow remote a (no CVSS)
- [CVE-2006-3341](https://cve.now/CVE-2006-3341.md): SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2006-3342](https://cve.now/CVE-2006-3342.md): Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3343](https://cve.now/CVE-2006-3343.md): PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-3335](https://cve.now/CVE-2006-3335.md): Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.