# CVEs published 2006-07-18 30 CVEs were published on July 18, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0817](https://cve.now/CVE-2006-0817.md): Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNe (no CVSS) - [CVE-2006-3467](https://cve.now/CVE-2006-3467.md): Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (no CVSS) - [CVE-2006-3469](https://cve.now/CVE-2006-3469.md): Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to ca (no CVSS) - [CVE-2006-0818](https://cve.now/CVE-2006-0818.md): Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNe (no CVSS) - [CVE-2006-3468](https://cve.now/CVE-2006-3468.md): Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP (no CVSS) - [CVE-2006-3627](https://cve.now/CVE-2006-3627.md): Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denia (no CVSS) - [CVE-2006-3628](https://cve.now/CVE-2006-3628.md): Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and (no CVSS) - [CVE-2006-3629](https://cve.now/CVE-2006-3629.md): Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of se (no CVSS) - [CVE-2006-3630](https://cve.now/CVE-2006-3630.md): Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS an (no CVSS) - [CVE-2006-3631](https://cve.now/CVE-2006-3631.md): Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of ser (no CVSS) - [CVE-2006-3632](https://cve.now/CVE-2006-3632.md): Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbit (no CVSS) - [CVE-2006-3679](https://cve.now/CVE-2006-3679.md): FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified atta (no CVSS) - [CVE-2006-3680](https://cve.now/CVE-2006-3680.md): Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-3681](https://cve.now/CVE-2006-3681.md): Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject ar (no CVSS) - [CVE-2006-3682](https://cve.now/CVE-2006-3682.md): awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode o (no CVSS) - [CVE-2006-3683](https://cve.now/CVE-2006-3683.md): PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code vi (no CVSS) - [CVE-2006-3684](https://cve.now/CVE-2006-3684.md): PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2006-3685](https://cve.now/CVE-2006-3685.md): PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS) - [CVE-2006-3686](https://cve.now/CVE-2006-3686.md): Unspecified vulnerability in \[SYSEXE\]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (cra (no CVSS) - [CVE-2006-3687](https://cve.now/CVE-2006-3687.md): Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, (no CVSS) - [CVE-2006-3688](https://cve.now/CVE-2006-3688.md): SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2006-3689](https://cve.now/CVE-2006-3689.md): PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ\[Lite\] allows remote attackers to execute arbitrary PH (no CVSS) - [CVE-2006-3690](https://cve.now/CVE-2006-3690.md): Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2006-3691](https://cve.now/CVE-2006-3691.md): Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID pa (no CVSS) - [CVE-2006-3692](https://cve.now/CVE-2006-3692.md): PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP (no CVSS) - [CVE-2006-3670](https://cve.now/CVE-2006-3670.md): Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515. (no CVSS) - [CVE-2006-3671](https://cve.now/CVE-2006-3671.md): Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote att (no CVSS) - [CVE-2006-3672](https://cve.now/CVE-2006-3672.md): KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method (no CVSS) - [CVE-2006-3673](https://cve.now/CVE-2006-3673.md): nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (application crash) via a large (no CVSS) - [CVE-2006-3674](https://cve.now/CVE-2006-3674.md): nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a large n (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-07-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.