# CVEs published 2006-10-03

13 CVEs were published on October 3, 2006: 0 critical, 1 high. Days are UTC.

- [CVE-2006-5151](https://cve.now/CVE-2006-5151.md): Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain r (no CVSS)
- [CVE-2006-5152](https://cve.now/CVE-2006-5152.md): Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2006-5153](https://cve.now/CVE-2006-5153.md): The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through (no CVSS)
- [CVE-2006-5154](https://cve.now/CVE-2006-5154.md): PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-5155](https://cve.now/CVE-2006-5155.md): PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2006-5156](https://cve.now/CVE-2006-5156.md): Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-5157](https://cve.now/CVE-2006-5157.md): Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 all (no CVSS)
- [CVE-2006-5158](https://cve.now/CVE-2006-5158.md): The nlmclnt\_mark\_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (proc (no CVSS)
- [CVE-2006-5159](https://cve.now/CVE-2006-5159.md): Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScrip (no CVSS)
- [CVE-2006-5160](https://cve.now/CVE-2006-5160.md): Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. (CVSS 8.1)
- [CVE-2006-5161](https://cve.now/CVE-2006-5161.md): IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers (no CVSS)
- [CVE-2006-5162](https://cve.now/CVE-2006-5162.md): wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and (no CVSS)
- [CVE-2006-5163](https://cve.now/CVE-2006-5163.md): IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.