# CVEs published 2006-08-05

31 CVEs were published on August 5, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0985](https://cve.now/CVE-2005-0985.md): Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecif (no CVSS)
- [CVE-2005-1726](https://cve.now/CVE-2005-1726.md): The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root (no CVSS)
- [CVE-2005-2194](https://cve.now/CVE-2005-2194.md): Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via (no CVSS)
- [CVE-2005-2527](https://cve.now/CVE-2005-2527.md): Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unsp (no CVSS)
- [CVE-2005-2529](https://cve.now/CVE-2005-2529.md): Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attac (no CVSS)
- [CVE-2005-2530](https://cve.now/CVE-2005-2530.md): Unspecified vulnerability in Java 1.3.1 before 1.3.1\_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS (no CVSS)
- [CVE-2005-2738](https://cve.now/CVE-2005-2738.md): Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, wh (no CVSS)
- [CVE-2006-0395](https://cve.now/CVE-2006-0395.md): The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which a (no CVSS)
- [CVE-2006-3997](https://cve.now/CVE-2006-3997.md): PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers (no CVSS)
- [CVE-2006-3998](https://cve.now/CVE-2006-3998.md): PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to (no CVSS)
- [CVE-2006-3999](https://cve.now/CVE-2006-3999.md): ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll Blac (no CVSS)
- [CVE-2006-4000](https://cve.now/CVE-2006-4000.md): Directory traversal vulnerability in cgi-bin/preview\_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote (no CVSS)
- [CVE-2006-4001](https://cve.now/CVE-2006-4001.md): Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows r (no CVSS)
- [CVE-2006-3457](https://cve.now/CVE-2006-3457.md): Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 (no CVSS)
- [CVE-2006-3980](https://cve.now/CVE-2006-3980.md): PHP remote file inclusion vulnerability in administrator/components/com\_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier f (no CVSS)
- [CVE-2006-3981](https://cve.now/CVE-2006-3981.md): PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attac (no CVSS)
- [CVE-2006-3982](https://cve.now/CVE-2006-3982.md): PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-3983](https://cve.now/CVE-2006-3983.md): PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-3984](https://cve.now/CVE-2006-3984.md): PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew (no CVSS)
- [CVE-2006-3985](https://cve.now/CVE-2006-3985.md): Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary co (no CVSS)
- [CVE-2006-3986](https://cve.now/CVE-2006-3986.md): PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2006-3987](https://cve.now/CVE-2006-3987.md): Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remote attackers to execu (no CVSS)
- [CVE-2006-3988](https://cve.now/CVE-2006-3988.md): PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attackers to execute arbitr (no CVSS)
- [CVE-2006-3989](https://cve.now/CVE-2006-3989.md): PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-3990](https://cve.now/CVE-2006-3990.md): Multiple PHP remote file inclusion vulnerabilities in Paul M. (no CVSS)
- [CVE-2006-3991](https://cve.now/CVE-2006-3991.md): PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2006-3992](https://cve.now/CVE-2006-3992.md): Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for I (no CVSS)
- [CVE-2006-3993](https://cve.now/CVE-2006-3993.md): PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows remote attackers to (no CVSS)
- [CVE-2006-3994](https://cve.now/CVE-2006-3994.md): SQL injection vulnerability in the u2u\_send\_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows r (no CVSS)
- [CVE-2006-3995](https://cve.now/CVE-2006-3995.md): Multiple PHP remote file inclusion vulnerabilities in (1) uhp\_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.ph (no CVSS)
- [CVE-2006-3996](https://cve.now/CVE-2006-3996.md): SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL comm (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.