# CVEs published 2006-07-17

18 CVEs were published on July 17, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3661](https://cve.now/CVE-2006-3661.md): Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2006-3662](https://cve.now/CVE-2006-3662.md): SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. (no CVSS)
- [CVE-2006-3663](https://cve.now/CVE-2006-3663.md): Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileg (no CVSS)
- [CVE-2006-3664](https://cve.now/CVE-2006-3664.md): Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv h (no CVSS)
- [CVE-2006-3665](https://cve.now/CVE-2006-3665.md): SquirrelMail 1.4.6 and earlier, with register\_globals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vec (no CVSS)
- [CVE-2006-3666](https://cve.now/CVE-2006-3666.md): SQL injection vulnerability in AjaxPortal 3.0, with magic\_quotes\_gpc disabled, allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3667](https://cve.now/CVE-2006-3667.md): Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack ve (no CVSS)
- [CVE-2006-3668](https://cve.now/CVE-2006-3668.md): Heap-based buffer overflow in the it\_read\_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS (no CVSS)
- [CVE-2006-3669](https://cve.now/CVE-2006-3669.md): Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable (no CVSS)
- [CVE-2006-3652](https://cve.now/CVE-2006-3652.md): Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a (no CVSS)
- [CVE-2006-3653](https://cve.now/CVE-2006-3653.md): wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via c (no CVSS)
- [CVE-2006-3654](https://cve.now/CVE-2006-3654.md): Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumpt (no CVSS)
- [CVE-2006-3655](https://cve.now/CVE-2006-3655.md): Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted Pow (no CVSS)
- [CVE-2006-3656](https://cve.now/CVE-2006-3656.md): Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint fi (no CVSS)
- [CVE-2006-3657](https://cve.now/CVE-2006-3657.md): Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microso (no CVSS)
- [CVE-2006-3658](https://cve.now/CVE-2006-3658.md): Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderIte (no CVSS)
- [CVE-2006-3659](https://cve.now/CVE-2006-3659.md): Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTM (no CVSS)
- [CVE-2006-3660](https://cve.now/CVE-2006-3660.md): Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.