# CVEs published 2006-08-25

17 CVEs were published on August 25, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4354](https://cve.now/CVE-2006-4354.md): PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2006-4355](https://cve.now/CVE-2006-4355.md): Cross-site scripting (XSS) vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows remote (no CVSS)
- [CVE-2006-4356](https://cve.now/CVE-2006-4356.md): SQL injection vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows remote attackers to (no CVSS)
- [CVE-2006-4357](https://cve.now/CVE-2006-4357.md): PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2006-4358](https://cve.now/CVE-2006-4358.md): Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the r (no CVSS)
- [CVE-2006-4359](https://cve.now/CVE-2006-4359.md): Stack-based buffer overflow in Trident Software PowerZip 7.06 Build 3895 on Windows 2000 allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2006-4360](https://cve.now/CVE-2006-4360.md): Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows remote authenticated use (no CVSS)
- [CVE-2006-4361](https://cve.now/CVE-2006-4361.md): Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-4362](https://cve.now/CVE-2006-4362.md): Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-4363](https://cve.now/CVE-2006-4363.md): PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com\_cropimage) 1.0 for Mambo allows remote attac (no CVSS)
- [CVE-2006-4364](https://cve.now/CVE-2006-4364.md): Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial (no CVSS)
- [CVE-2006-4352](https://cve.now/CVE-2006-4352.md): The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator do (no CVSS)
- [CVE-2006-4353](https://cve.now/CVE-2006-4353.md): Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from a (no CVSS)
- [CVE-2006-2112](https://cve.now/CVE-2006-2112.md): Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint f (no CVSS)
- [CVE-2006-2113](https://cve.now/CVE-2006-2113.md): The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn an (no CVSS)
- [CVE-2006-3743](https://cve.now/CVE-2006-3743.md): Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images. (no CVSS)
- [CVE-2006-3744](https://cve.now/CVE-2006-3744.md): Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.