# CVEs published 2006-10-10 32 CVEs were published on October 10, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3887](https://cve.now/CVE-2006-3887.md): Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecifi (no CVSS) - [CVE-2006-3888](https://cve.now/CVE-2006-3888.md): Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as (no CVSS) - [CVE-2006-5229](https://cve.now/CVE-2006-5229.md): OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote atta (no CVSS) - [CVE-2006-2387](https://cve.now/CVE-2006-2387.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 (no CVSS) - [CVE-2006-3434](https://cve.now/CVE-2006-3434.md): Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute (no CVSS) - [CVE-2006-3647](https://cve.now/CVE-2006-3647.md): Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrar (no CVSS) - [CVE-2006-3650](https://cve.now/CVE-2006-3650.md): Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user- (no CVSS) - [CVE-2006-3651](https://cve.now/CVE-2006-3651.md): Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via (no CVSS) - [CVE-2006-3864](https://cve.now/CVE-2006-3864.md): Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user (no CVSS) - [CVE-2006-3867](https://cve.now/CVE-2006-3867.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attacke (no CVSS) - [CVE-2006-3868](https://cve.now/CVE-2006-3868.md): Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Sm (no CVSS) - [CVE-2006-3875](https://cve.now/CVE-2006-3875.md): Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attacke (no CVSS) - [CVE-2006-3877](https://cve.now/CVE-2006-3877.md): Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allo (no CVSS) - [CVE-2006-3978](https://cve.now/CVE-2006-3978.md): Unspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibly other products, al (no CVSS) - [CVE-2006-4685](https://cve.now/CVE-2006-4685.md): The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redi (no CVSS) - [CVE-2006-4686](https://cve.now/CVE-2006-4686.md): Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3. (no CVSS) - [CVE-2006-4692](https://cve.now/CVE-2006-4692.md): Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and e (no CVSS) - [CVE-2006-4693](https://cve.now/CVE-2006-4693.md): Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via (no CVSS) - [CVE-2006-4696](https://cve.now/CVE-2006-4696.md): Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows re (no CVSS) - [CVE-2006-5199](https://cve.now/CVE-2006-5199.md): Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation, which allows local (no CVSS) - [CVE-2006-5200](https://cve.now/CVE-2006-5200.md): Unspecified vulnerability in Adobe Breeze 5 Licensed Server and Breeze 5.1 Licensed Server allows attackers to read arbitrary files via unkn (no CVSS) - [CVE-2006-3435](https://cve.now/CVE-2006-3435.md): PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, wh (no CVSS) - [CVE-2006-3436](https://cve.now/CVE-2006-3436.md): Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-3876](https://cve.now/CVE-2006-3876.md): Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allo (no CVSS) - [CVE-2006-5221](https://cve.now/CVE-2006-5221.md): Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) matiere\_I (no CVSS) - [CVE-2006-5222](https://cve.now/CVE-2006-5222.md): Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP c (no CVSS) - [CVE-2006-5223](https://cve.now/CVE-2006-5223.md): PHP remote file inclusion vulnerability in includes/functions\_user\_viewed\_posts.php in the Nivisec User Viewed Posts Tracker module 1.0 and (no CVSS) - [CVE-2006-5224](https://cve.now/CVE-2006-5224.md): PHP remote file inclusion vulnerability in includes/logger\_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB (no CVSS) - [CVE-2006-5225](https://cve.now/CVE-2006-5225.md): Multiple SQL injection vulnerabilities in AAIportal before 1.4.0 allow remote attackers to execute arbitrary SQL commands via unspecified ve (no CVSS) - [CVE-2006-5226](https://cve.now/CVE-2006-5226.md): PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbi (no CVSS) - [CVE-2006-5227](https://cve.now/CVE-2006-5227.md): Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-5228](https://cve.now/CVE-2006-5228.md): Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 and earlier allow remo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.