# CVEs published 2006-07-14

36 CVEs were published on July 14, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3620](https://cve.now/CVE-2006-3620.md): Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-3621](https://cve.now/CVE-2006-3621.md): SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the t (no CVSS)
- [CVE-2006-3622](https://cve.now/CVE-2006-3622.md): The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, (no CVSS)
- [CVE-2006-3623](https://cve.now/CVE-2006-3623.md): Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote atta (no CVSS)
- [CVE-2006-3624](https://cve.now/CVE-2006-3624.md): Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the u (no CVSS)
- [CVE-2006-3625](https://cve.now/CVE-2006-3625.md): FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p parameter (no CVSS)
- [CVE-2006-2450](https://cve.now/CVE-2006-2450.md): auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure securi (no CVSS)
- [CVE-2006-3606](https://cve.now/CVE-2006-3606.md): Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dependent attackers to c (no CVSS)
- [CVE-2006-3607](https://cve.now/CVE-2006-3607.md): Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote (no CVSS)
- [CVE-2006-3608](https://cve.now/CVE-2006-3608.md): The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of upload (no CVSS)
- [CVE-2006-3609](https://cve.now/CVE-2006-3609.md): Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-3610](https://cve.now/CVE-2006-3610.md): index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified pa (no CVSS)
- [CVE-2006-3611](https://cve.now/CVE-2006-3611.md): Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via d (no CVSS)
- [CVE-2006-3612](https://cve.now/CVE-2006-3612.md): Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vec (no CVSS)
- [CVE-2006-3613](https://cve.now/CVE-2006-3613.md): Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka ente (no CVSS)
- [CVE-2006-3614](https://cve.now/CVE-2006-3614.md): index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page\_name parameter, possibly due to a SQL i (no CVSS)
- [CVE-2006-3615](https://cve.now/CVE-2006-3615.md): Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register\_globals is enabled, allow remote attackers to execute arb (no CVSS)
- [CVE-2006-3616](https://cve.now/CVE-2006-3616.md): Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2006-3617](https://cve.now/CVE-2006-3617.md): Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to (no CVSS)
- [CVE-2006-3618](https://cve.now/CVE-2006-3618.md): SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-3591](https://cve.now/CVE-2006-3591.md): Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a Tr (no CVSS)
- [CVE-2006-3592](https://cve.now/CVE-2006-3592.md): Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users (no CVSS)
- [CVE-2006-3593](https://cve.now/CVE-2006-3593.md): The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files (no CVSS)
- [CVE-2006-3594](https://cve.now/CVE-2006-3594.md): Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long host (no CVSS)
- [CVE-2006-3595](https://cve.now/CVE-2006-3595.md): The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allo (no CVSS)
- [CVE-2006-3596](https://cve.now/CVE-2006-3596.md): The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed o (no CVSS)
- [CVE-2006-3597](https://cve.now/CVE-2006-3597.md): passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" (no CVSS)
- [CVE-2006-3598](https://cve.now/CVE-2006-3598.md): SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid para (no CVSS)
- [CVE-2006-3599](https://cve.now/CVE-2006-3599.md): SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2006-3600](https://cve.now/CVE-2006-3600.md): Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers (no CVSS)
- [CVE-2006-3601](https://cve.now/CVE-2006-3601.md): \*\* UNVERIFIABLE \*\* Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gai (no CVSS)
- [CVE-2006-3602](https://cve.now/CVE-2006-3602.md): Directory traversal vulnerability in jscripts/tiny\_mce/tiny\_mce\_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrar (no CVSS)
- [CVE-2006-3603](https://cve.now/CVE-2006-3603.md): Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2006-3604](https://cve.now/CVE-2006-3604.md): Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) (no CVSS)
- [CVE-2006-3605](https://cve.now/CVE-2006-3605.md): Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitia (no CVSS)
- [CVE-2006-3590](https://cve.now/CVE-2006-3590.md): mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed sha (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.