# CVEs published 2006-07-13

57 CVEs were published on July 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1301](https://cve.now/CVE-2006-1301.md): Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record t (no CVSS)
- [CVE-2006-1308](https://cve.now/CVE-2006-1308.md): Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with (no CVSS)
- [CVE-2006-1309](https://cve.now/CVE-2006-1309.md): Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that (no CVSS)
- [CVE-2006-1302](https://cve.now/CVE-2006-1302.md): Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain c (no CVSS)
- [CVE-2006-1304](https://cve.now/CVE-2006-1304.md): Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted (no CVSS)
- [CVE-2006-1306](https://cve.now/CVE-2006-1306.md): Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with a (no CVSS)
- [CVE-2006-2388](https://cve.now/CVE-2006-2388.md): Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to (no CVSS)
- [CVE-2006-3135](https://cve.now/CVE-2006-3135.md): Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-3587](https://cve.now/CVE-2006-3587.md): Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed (no CVSS)
- [CVE-2006-3588](https://cve.now/CVE-2006-3588.md): Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) v (no CVSS)
- [CVE-2006-3581](https://cve.now/CVE-2006-3581.md): Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-3582](https://cve.now/CVE-2006-3582.md): Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-3453](https://cve.now/CVE-2006-3453.md): Buffer overflow in Adobe Acrobat 6.0 to 6.0.4 allows remote attackers to execute arbitrary code via unknown vectors in a document that trigg (no CVSS)
- [CVE-2006-3573](https://cve.now/CVE-2006-3573.md): Format string vulnerability in the WriteText function in agl\_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows remote attackers to (no CVSS)
- [CVE-2006-3574](https://cve.now/CVE-2006-3574.md): Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus (no CVSS)
- [CVE-2006-3575](https://cve.now/CVE-2006-3575.md): Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service (no CVSS)
- [CVE-2006-3576](https://cve.now/CVE-2006-3576.md): SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2006-3577](https://cve.now/CVE-2006-3577.md): SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via the Date parameter (no CVSS)
- [CVE-2006-3578](https://cve.now/CVE-2006-3578.md): Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to read arbitra (no CVSS)
- [CVE-2006-3579](https://cve.now/CVE-2006-3579.md): Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to injec (no CVSS)
- [CVE-2006-3580](https://cve.now/CVE-2006-3580.md): SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2006-3560](https://cve.now/CVE-2006-3560.md): SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-3561](https://cve.now/CVE-2006-3561.md): BT Voyager 2091 Wireless firmware 2.21.05.08m\_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authen (no CVSS)
- [CVE-2006-3562](https://cve.now/CVE-2006-3562.md): PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the \_PX\_confi (no CVSS)
- [CVE-2006-3563](https://cve.now/CVE-2006-3563.md): Cross-site scripting (XSS) vulnerability in gallery/thumb.php in Winged Gallery 1.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-3564](https://cve.now/CVE-2006-3564.md): Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-3565](https://cve.now/CVE-2006-3565.md): SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3566](https://cve.now/CVE-2006-3566.md): search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to (no CVSS)
- [CVE-2006-3567](https://cve.now/CVE-2006-3567.md): Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and pos (no CVSS)
- [CVE-2006-3568](https://cve.now/CVE-2006-3568.md): Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remo (no CVSS)
- [CVE-2006-3569](https://cve.now/CVE-2006-3569.md): Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Fil (no CVSS)
- [CVE-2006-3570](https://cve.now/CVE-2006-3570.md): Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8, 2006 allows remote a (no CVSS)
- [CVE-2006-3571](https://cve.now/CVE-2006-3571.md): Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attackers to inject arbitra (no CVSS)
- [CVE-2006-3572](https://cve.now/CVE-2006-3572.md): SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2003-1304](https://cve.now/CVE-2003-1304.md): EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote at (no CVSS)
- [CVE-2006-3538](https://cve.now/CVE-2006-3538.md): Multiple cross-site scripting (XSS) vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2006-3539](https://cve.now/CVE-2006-3539.md): Multiple cross-site scripting (XSS) vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-3540](https://cve.now/CVE-2006-3540.md): Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSa (no CVSS)
- [CVE-2006-3541](https://cve.now/CVE-2006-3541.md): SQL injection vulnerability in Meine Links (aka My Links) in Kyberna ky2help allows remote authenticated users to execute arbitrary SQL comm (no CVSS)
- [CVE-2006-3542](https://cve.now/CVE-2006-3542.md): Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-3543](https://cve.now/CVE-2006-3543.md): Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-3544](https://cve.now/CVE-2006-3544.md): Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3545](https://cve.now/CVE-2006-3545.md): Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple e (no CVSS)
- [CVE-2006-3546](https://cve.now/CVE-2006-3546.md): Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via a long HTTP POST req (no CVSS)
- [CVE-2006-3547](https://cve.now/CVE-2006-3547.md): EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the id (CVSS 5.5)
- [CVE-2006-3548](https://cve.now/CVE-2006-3548.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote (no CVSS)
- [CVE-2006-3549](https://cve.now/CVE-2006-3549.md): services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capab (no CVSS)
- [CVE-2006-3550](https://cve.now/CVE-2006-3550.md): Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-3551](https://cve.now/CVE-2006-3551.md): NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall (no CVSS)
- [CVE-2006-3552](https://cve.now/CVE-2006-3552.md): Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngin (no CVSS)
- [CVE-2006-3553](https://cve.now/CVE-2006-3553.md): PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/pla (no CVSS)
- [CVE-2006-3554](https://cve.now/CVE-2006-3554.md): Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2006-3555](https://cve.now/CVE-2006-3555.md): Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-3556](https://cve.now/CVE-2006-3556.md): PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-3557](https://cve.now/CVE-2006-3557.md): MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows remote attackers to ob (no CVSS)
- [CVE-2006-3558](https://cve.now/CVE-2006-3558.md): Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-3559](https://cve.now/CVE-2006-3559.md): Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.