# CVEs published 2006-07-10

27 CVEs were published on July 10, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3487](https://cve.now/CVE-2006-3487.md): VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local da (no CVSS)
- [CVE-2006-3488](https://cve.now/CVE-2006-3488.md): Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories (no CVSS)
- [CVE-2006-3489](https://cve.now/CVE-2006-3489.md): F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6. (no CVSS)
- [CVE-2006-3490](https://cve.now/CVE-2006-3490.md): F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6. (no CVSS)
- [CVE-2006-3491](https://cve.now/CVE-2006-3491.md): Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a long nickname. (no CVSS)
- [CVE-2006-3492](https://cve.now/CVE-2006-3492.md): The CORBA::ORBInvokeRec::set\_answer\_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote attackers to cause a (no CVSS)
- [CVE-2006-3493](https://cve.now/CVE-2006-3493.md): Buffer overflow in LsCreateLine function (mso\_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microso (no CVSS)
- [CVE-2006-3494](https://cve.now/CVE-2006-3494.md): Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via t (no CVSS)
- [CVE-2006-3486](https://cve.now/CVE-2006-3486.md): Off-by-one buffer overflow in the Instance\_options::complete\_initialization function in instance\_options.cc in the Instance Manager in MySQL (no CVSS)
- [CVE-2006-3472](https://cve.now/CVE-2006-3472.md): Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a (no CVSS)
- [CVE-2006-3473](https://cve.now/CVE-2006-3473.md): CRLF injection vulnerability in form\_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates s (no CVSS)
- [CVE-2006-3474](https://cve.now/CVE-2006-3474.md): Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) ca (no CVSS)
- [CVE-2006-3475](https://cve.now/CVE-2006-3475.md): Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-3476](https://cve.now/CVE-2006-3476.md): Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows remote attackers to (no CVSS)
- [CVE-2006-3477](https://cve.now/CVE-2006-3477.md): Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2006-3478](https://cve.now/CVE-2006-3478.md): PHP remote file inclusion vulnerability in styles/default/global\_header.php in MyPHP CMS 0.3 and earlier, when register\_globals is enabled, (no CVSS)
- [CVE-2006-3479](https://cve.now/CVE-2006-3479.md): Cross-site request forgery (CSRF) vulnerability in the del\_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 (no CVSS)
- [CVE-2006-3480](https://cve.now/CVE-2006-3480.md): Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2006-3481](https://cve.now/CVE-2006-3481.md): Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified par (no CVSS)
- [CVE-2006-3482](https://cve.now/CVE-2006-3482.md): Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-3483](https://cve.now/CVE-2006-3483.md): PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allows remote attackers t (no CVSS)
- [CVE-2006-3484](https://cve.now/CVE-2006-3484.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-3485](https://cve.now/CVE-2006-3485.md): Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2006-2917](https://cve.now/CVE-2006-2917.md): Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 10 (no CVSS)
- [CVE-2006-2936](https://cve.now/CVE-2006-2936.md): The ftdi\_sio driver (usb/serial/ftdi\_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a d (no CVSS)
- [CVE-2006-3470](https://cve.now/CVE-2006-3470.md): The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges. (no CVSS)
- [CVE-2006-3471](https://cve.now/CVE-2006-3471.md): Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a ch (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.