# CVEs published 2006-11-01

16 CVEs were published on November 1, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4517](https://cve.now/CVE-2006-4517.md): Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in (no CVSS)
- [CVE-2006-4704](https://cve.now/CVE-2006-4704.md): Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Micros (no CVSS)
- [CVE-2006-4839](https://cve.now/CVE-2006-4839.md): Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite an (no CVSS)
- [CVE-2006-5645](https://cve.now/CVE-2006-5645.md): Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled sca (no CVSS)
- [CVE-2006-5646](https://cve.now/CVE-2006-5646.md): Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms (no CVSS)
- [CVE-2006-5647](https://cve.now/CVE-2006-5647.md): Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote atta (no CVSS)
- [CVE-2006-5634](https://cve.now/CVE-2006-5634.md): Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2006-5635](https://cve.now/CVE-2006-5635.md): SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW param (no CVSS)
- [CVE-2006-5636](https://cve.now/CVE-2006-5636.md): PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote attackers to execute a (no CVSS)
- [CVE-2006-5637](https://cve.now/CVE-2006-5637.md): PHP remote file inclusion vulnerability in faq\_reply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-5638](https://cve.now/CVE-2006-5638.md): Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-5639](https://cve.now/CVE-2006-5639.md): Unspecified vulnerability in the random number generator in OpenWBEM (Web Based Enterprise Management) 3.2.0 allows attackers to gain privil (no CVSS)
- [CVE-2006-5640](https://cve.now/CVE-2006-5640.md): SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-5641](https://cve.now/CVE-2006-5641.md): SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-5642](https://cve.now/CVE-2006-5642.md): Unspecified vulnerability in NmnLogger 1.0.0 and earlier has unknown impact and attack vectors related to configuration of mesasge drivers. (no CVSS)
- [CVE-2006-5643](https://cve.now/CVE-2006-5643.md): Cross-site scripting (XSS) vulnerability in search\_de.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.