# CVEs published 2006-07-12 20 CVEs were published on July 12, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3452](https://cve.now/CVE-2006-3452.md): Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privil (no CVSS) - [CVE-2006-3530](https://cve.now/CVE-2006-3530.md): PHP remote file inclusion vulnerability in com\_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Joomla 0.3 and possibly u (no CVSS) - [CVE-2006-3531](https://cve.now/CVE-2006-3531.md): includes/editor/insert\_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote a (no CVSS) - [CVE-2006-3532](https://cve.now/CVE-2006-3532.md): PHP file inclusion vulnerability in includes/edit\_new.php in Pivot 1.30 RC2 and earlier, when register\_globals is enabled, allows remote att (no CVSS) - [CVE-2006-3533](https://cve.now/CVE-2006-3533.md): Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.30 RC2 and earlier, when register\_globals is enabled, allow remote attackers (no CVSS) - [CVE-2006-3534](https://cve.now/CVE-2006-3534.md): Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows (no CVSS) - [CVE-2006-3535](https://cve.now/CVE-2006-3535.md): Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.7 allows remote attackers to read arbitrary files via unspecified vec (no CVSS) - [CVE-2006-3536](https://cve.now/CVE-2006-3536.md): Direct static code injection vulnerability in code/class\_db\_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbi (no CVSS) - [CVE-2006-3537](https://cve.now/CVE-2006-3537.md): PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the da (no CVSS) - [CVE-2006-3403](https://cve.now/CVE-2006-3403.md): The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via (no CVSS) - [CVE-2006-3520](https://cve.now/CVE-2006-3520.md): PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register\_globals is enabled, allows rem (no CVSS) - [CVE-2006-3521](https://cve.now/CVE-2006-3521.md): Multiple cross-site scripting (XSS) vulnerabilities in index/siteforge-bugs-action/proj.siteforge in SiteForge Collaborative Development Pla (no CVSS) - [CVE-2006-3522](https://cve.now/CVE-2006-3522.md): Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary (no CVSS) - [CVE-2006-3523](https://cve.now/CVE-2006-3523.md): Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived . (no CVSS) - [CVE-2006-3524](https://cve.now/CVE-2006-3524.md): Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field valu (no CVSS) - [CVE-2006-3525](https://cve.now/CVE-2006-3525.md): SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to (no CVSS) - [CVE-2006-3526](https://cve.now/CVE-2006-3526.md): Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject ar (no CVSS) - [CVE-2006-3527](https://cve.now/CVE-2006-3527.md): Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2006-3528](https://cve.now/CVE-2006-3528.md): Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary (no CVSS) - [CVE-2006-3529](https://cve.now/CVE-2006-3529.md): Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-07-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.