# CVEs published 2006-08-17

42 CVEs were published on August 17, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2002-2216](https://cve.now/CVE-2002-2216.md): Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive inform (no CVSS)
- [CVE-2004-2661](https://cve.now/CVE-2004-2661.md): Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI sour (no CVSS)
- [CVE-2004-2662](https://cve.now/CVE-2004-2662.md): Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data relat (no CVSS)
- [CVE-2006-4217](https://cve.now/CVE-2006-4217.md): PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-4218](https://cve.now/CVE-2006-4218.md): Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local fi (no CVSS)
- [CVE-2006-4021](https://cve.now/CVE-2006-4021.md): The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions u (no CVSS)
- [CVE-2006-4195](https://cve.now/CVE-2006-4195.md): PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com\_peoplebook) 1.0 and earlier, and (no CVSS)
- [CVE-2006-4196](https://cve.now/CVE-2006-4196.md): PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-4197](https://cve.now/CVE-2006-4197.md): Multiple buffer overflows in libmusicbrainz (aka mb\_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow (no CVSS)
- [CVE-2006-4198](https://cve.now/CVE-2006-4198.md): PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register\_globals is enabled, allows (no CVSS)
- [CVE-2006-4199](https://cve.now/CVE-2006-4199.md): Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-4200](https://cve.now/CVE-2006-4200.md): Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors rela (no CVSS)
- [CVE-2006-4201](https://cve.now/CVE-2006-4201.md): Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remo (no CVSS)
- [CVE-2006-4202](https://cve.now/CVE-2006-4202.md): SQL injection vulnerability in proje\_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2006-4203](https://cve.now/CVE-2006-4203.md): PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com\_mmp) 1.2 and earlier for Mambo allows remote attackers to (no CVSS)
- [CVE-2006-4204](https://cve.now/CVE-2006-4204.md): Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-4205](https://cve.now/CVE-2006-4205.md): Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2006-4206](https://cve.now/CVE-2006-4206.md): Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versi (no CVSS)
- [CVE-2006-4207](https://cve.now/CVE-2006-4207.md): Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2006-4208](https://cve.now/CVE-2006-4208.md): Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticate (no CVSS)
- [CVE-2006-4209](https://cve.now/CVE-2006-4209.md): PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-4210](https://cve.now/CVE-2006-4210.md): nu\_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register\_globals is enabled, allows remote attackers to use the server as an o (no CVSS)
- [CVE-2006-4211](https://cve.now/CVE-2006-4211.md): Cross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject ar (no CVSS)
- [CVE-2006-4212](https://cve.now/CVE-2006-4212.md): SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-4213](https://cve.now/CVE-2006-4213.md): PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to ex (no CVSS)
- [CVE-2006-4214](https://cve.now/CVE-2006-4214.md): Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC (no CVSS)
- [CVE-2006-4215](https://cve.now/CVE-2006-4215.md): PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register\_globals is enabled, allows remote attack (no CVSS)
- [CVE-2006-3121](https://cve.now/CVE-2006-3121.md): The peel\_netstring function in cl\_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allo (no CVSS)
- [CVE-2006-3854](https://cve.now/CVE-2006-3854.md): Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote at (no CVSS)
- [CVE-2006-3859](https://cve.now/CVE-2006-3859.md): IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl (no CVSS)
- [CVE-2006-3860](https://cve.now/CVE-2006-3860.md): IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary c (no CVSS)
- [CVE-2006-4189](https://cve.now/CVE-2006-4189.md): Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir\[ (no CVSS)
- [CVE-2006-4190](https://cve.now/CVE-2006-4190.md): Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (no CVSS)
- [CVE-2006-4191](https://cve.now/CVE-2006-4191.md): Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execu (no CVSS)
- [CVE-2006-4192](https://cve.now/CVE-2006-4192.md): Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possi (no CVSS)
- [CVE-2006-4193](https://cve.now/CVE-2006-4193.md): Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute ar (no CVSS)
- [CVE-2006-4194](https://cve.now/CVE-2006-4194.md): Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devi (no CVSS)
- [CVE-2006-4184](https://cve.now/CVE-2006-4184.md): SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to byp (no CVSS)
- [CVE-2006-4185](https://cve.now/CVE-2006-4185.md): Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) vi (no CVSS)
- [CVE-2006-4186](https://cve.now/CVE-2006-4186.md): The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain (no CVSS)
- [CVE-2006-4187](https://cve.now/CVE-2006-4187.md): Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of servi (no CVSS)
- [CVE-2006-4188](https://cve.now/CVE-2006-4188.md): Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.