# CVEs published 2006-10-25 26 CVEs were published on October 25, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5382](https://cve.now/CVE-2006-5382.md): 3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string (no CVSS) - [CVE-2006-5501](https://cve.now/CVE-2006-5501.md): Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allow (no CVSS) - [CVE-2006-5502](https://cve.now/CVE-2006-5502.md): Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Ed (no CVSS) - [CVE-2006-5503](https://cve.now/CVE-2006-5503.md): Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-5504](https://cve.now/CVE-2006-5504.md): Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-5505](https://cve.now/CVE-2006-5505.md): Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) (no CVSS) - [CVE-2006-5506](https://cve.now/CVE-2006-5506.md): Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path paramet (no CVSS) - [CVE-2006-5507](https://cve.now/CVE-2006-5507.md): Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbitrary PHP code via a U (no CVSS) - [CVE-2006-5508](https://cve.now/CVE-2006-5508.md): Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL command (no CVSS) - [CVE-2006-5509](https://cve.now/CVE-2006-5509.md): Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted (no CVSS) - [CVE-2006-5510](https://cve.now/CVE-2006-5510.md): Directory traversal vulnerability in explorer\_load\_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files vi (no CVSS) - [CVE-2006-5511](https://cve.now/CVE-2006-5511.md): Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register\_globals is enabled, allows remote attackers (no CVSS) - [CVE-2006-5512](https://cve.now/CVE-2006-5512.md): Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-5488](https://cve.now/CVE-2006-5488.md): SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to execut (no CVSS) - [CVE-2006-5489](https://cve.now/CVE-2006-5489.md): Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organi (no CVSS) - [CVE-2006-5490](https://cve.now/CVE-2006-5490.md): Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2006-5491](https://cve.now/CVE-2006-5491.md): Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-5492](https://cve.now/CVE-2006-5492.md): Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (documen (no CVSS) - [CVE-2006-5493](https://cve.now/CVE-2006-5493.md): PHP remote file inclusion vulnerability in template/purpletech/base\_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute ar (no CVSS) - [CVE-2006-5494](https://cve.now/CVE-2006-5494.md): Multiple PHP remote file inclusion vulnerabilities in modules/My\_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allo (no CVSS) - [CVE-2006-5495](https://cve.now/CVE-2006-5495.md): Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5496](https://cve.now/CVE-2006-5496.md): Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2006-5497](https://cve.now/CVE-2006-5497.md): PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register\_globals is ena (no CVSS) - [CVE-2006-5498](https://cve.now/CVE-2006-5498.md): Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include (no CVSS) - [CVE-2006-5499](https://cve.now/CVE-2006-5499.md): Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web sc (no CVSS) - [CVE-2006-5500](https://cve.now/CVE-2006-5500.md): Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic\_quotes\_ (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.