# CVEs published 2006-08-08

18 CVEs were published on August 8, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3450](https://cve.now/CVE-2006-3450.md): Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to (no CVSS)
- [CVE-2006-3451](https://cve.now/CVE-2006-3451.md): Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to cons (no CVSS)
- [CVE-2006-3583](https://cve.now/CVE-2006-3583.md): Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator (no CVSS)
- [CVE-2006-3584](https://cve.now/CVE-2006-3584.md): Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables vi (no CVSS)
- [CVE-2006-3585](https://cve.now/CVE-2006-3585.md): Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-3586](https://cve.now/CVE-2006-3586.md): SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE (no CVSS)
- [CVE-2006-3637](https://cve.now/CVE-2006-3637.md): Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted r (no CVSS)
- [CVE-2006-3638](https://cve.now/CVE-2006-3638.md): Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial o (no CVSS)
- [CVE-2006-3114](https://cve.now/CVE-2006-3114.md): PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privil (no CVSS)
- [CVE-2006-3853](https://cve.now/CVE-2006-3853.md): Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote atta (no CVSS)
- [CVE-2006-3855](https://cve.now/CVE-2006-3855.md): The ifx\_load\_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the Dl (no CVSS)
- [CVE-2006-3856](https://cve.now/CVE-2006-3856.md): IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via uns (no CVSS)
- [CVE-2006-3857](https://cve.now/CVE-2006-3857.md): Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users t (no CVSS)
- [CVE-2006-3858](https://cve.now/CVE-2006-3858.md): IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows lo (no CVSS)
- [CVE-2006-3861](https://cve.now/CVE-2006-3861.md): IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote (no CVSS)
- [CVE-2006-3862](https://cve.now/CVE-2006-3862.md): Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute a (no CVSS)
- [CVE-2006-4018](https://cve.now/CVE-2006-4018.md): Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attacke (no CVSS)
- [CVE-2006-4020](https://cve.now/CVE-2006-4020.md): scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP funct (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.