# CVEs published 2006-07-27

40 CVEs were published on July 27, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2933](https://cve.now/CVE-2006-2933.md): kdesktop\_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the s (no CVSS)
- [CVE-2006-3902](https://cve.now/CVE-2006-3902.md): Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2006-3903](https://cve.now/CVE-2006-3903.md): CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and (no CVSS)
- [CVE-2006-3904](https://cve.now/CVE-2006-3904.md): SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic\_quotes\_gpc disabled, allows remote attackers t (no CVSS)
- [CVE-2006-3905](https://cve.now/CVE-2006-3905.md): SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post\_id paramet (no CVSS)
- [CVE-2006-3906](https://cve.now/CVE-2006-3906.md): Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attack (no CVSS)
- [CVE-2006-3907](https://cve.now/CVE-2006-3907.md): Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administr (no CVSS)
- [CVE-2006-3908](https://cve.now/CVE-2006-3908.md): Format string vulnerability in the flush\_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote (no CVSS)
- [CVE-2006-3909](https://cve.now/CVE-2006-3909.md): Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-3113](https://cve.now/CVE-2006-3113.md): Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2006-3801](https://cve.now/CVE-2006-3801.md): Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which lea (no CVSS)
- [CVE-2006-3802](https://cve.now/CVE-2006-3802.md): Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods (no CVSS)
- [CVE-2006-3805](https://cve.now/CVE-2006-3805.md): The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers (no CVSS)
- [CVE-2006-3808](https://cve.now/CVE-2006-3808.md): Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privile (no CVSS)
- [CVE-2006-3809](https://cve.now/CVE-2006-3809.md): Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privileg (no CVSS)
- [CVE-2006-3810](https://cve.now/CVE-2006-3810.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow (no CVSS)
- [CVE-2006-3811](https://cve.now/CVE-2006-3811.md): Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to (no CVSS)
- [CVE-2006-3677](https://cve.now/CVE-2006-3677.md): Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properti (no CVSS)
- [CVE-2006-3803](https://cve.now/CVE-2006-3803.md): Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before (no CVSS)
- [CVE-2006-3804](https://cve.now/CVE-2006-3804.md): Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2006-3806](https://cve.now/CVE-2006-3806.md): Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0. (no CVSS)
- [CVE-2006-3807](https://cve.now/CVE-2006-3807.md): Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-3840](https://cve.now/CVE-2006-3840.md): The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Se (no CVSS)
- [CVE-2006-3897](https://cve.now/CVE-2006-3897.md): Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by (no CVSS)
- [CVE-2006-3898](https://cve.now/CVE-2006-3898.md): Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Cl (no CVSS)
- [CVE-2006-3899](https://cve.now/CVE-2006-3899.md): Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the st (no CVSS)
- [CVE-2006-3900](https://cve.now/CVE-2006-3900.md): Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-3901](https://cve.now/CVE-2006-3901.md): Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attac (no CVSS)
- [CVE-2006-3633](https://cve.now/CVE-2006-3633.md): OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in (no CVSS)
- [CVE-2006-3819](https://cve.now/CVE-2006-3819.md): Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via (no CVSS)
- [CVE-2006-3838](https://cve.now/CVE-2006-3838.md): Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Side (no CVSS)
- [CVE-2006-3878](https://cve.now/CVE-2006-3878.md): Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root (no CVSS)
- [CVE-2006-3879](https://cve.now/CVE-2006-3879.md): Integer overflow in the loadChunk function in loaders/load\_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause (no CVSS)
- [CVE-2006-3880](https://cve.now/CVE-2006-3880.md): Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of servi (no CVSS)
- [CVE-2006-3881](https://cve.now/CVE-2006-3881.md): Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-3882](https://cve.now/CVE-2006-3882.md): Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which ca (no CVSS)
- [CVE-2006-3883](https://cve.now/CVE-2006-3883.md): Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-3884](https://cve.now/CVE-2006-3884.md): Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3885](https://cve.now/CVE-2006-3885.md): Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded (no CVSS)
- [CVE-2006-3886](https://cve.now/CVE-2006-3886.md): SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page par (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.