# CVEs published 2006-11-10 31 CVEs were published on November 10, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5821](https://cve.now/CVE-2006-5821.md): Heap-based buffer overflow in the IMA\_SECURE\_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Se (no CVSS) - [CVE-2006-5861](https://cve.now/CVE-2006-5861.md): The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, (no CVSS) - [CVE-2006-5487](https://cve.now/CVE-2006-5487.md): Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers (no CVSS) - [CVE-2006-5839](https://cve.now/CVE-2006-5839.md): PHP remote file inclusion vulnerability in ad\_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to execute arbitrary PH (no CVSS) - [CVE-2006-5840](https://cve.now/CVE-2006-5840.md): Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid pa (no CVSS) - [CVE-2006-5841](https://cve.now/CVE-2006-5841.md): Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers (no CVSS) - [CVE-2006-5842](https://cve.now/CVE-2006-5842.md): The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local u (no CVSS) - [CVE-2006-5843](https://cve.now/CVE-2006-5843.md): Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2006-5844](https://cve.now/CVE-2006-5844.md): Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions\[\] and (2) searchText\[\] parameters (no CVSS) - [CVE-2006-5845](https://cve.now/CVE-2006-5845.md): Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP (no CVSS) - [CVE-2006-5846](https://cve.now/CVE-2006-5846.md): Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files (no CVSS) - [CVE-2006-5847](https://cve.now/CVE-2006-5847.md): Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web scrip (no CVSS) - [CVE-2006-5849](https://cve.now/CVE-2006-5849.md): PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5850](https://cve.now/CVE-2006-5850.md): Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as dem (no CVSS) - [CVE-2006-5851](https://cve.now/CVE-2006-5851.md): openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a differen (no CVSS) - [CVE-2006-5852](https://cve.now/CVE-2006-5852.md): Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that (no CVSS) - [CVE-2006-5853](https://cve.now/CVE-2006-5853.md): Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attackers to inject arbitrary (no CVSS) - [CVE-2006-5825](https://cve.now/CVE-2006-5825.md): Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-5826](https://cve.now/CVE-2006-5826.md): Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitrary code or cause a (no CVSS) - [CVE-2006-5827](https://cve.now/CVE-2006-5827.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and earlier allow remote attackers to inject arbi (no CVSS) - [CVE-2006-5828](https://cve.now/CVE-2006-5828.md): SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS) - [CVE-2006-5829](https://cve.now/CVE-2006-5829.md): Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to execute arbitrary S (no CVSS) - [CVE-2006-5830](https://cve.now/CVE-2006-5830.md): Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject (no CVSS) - [CVE-2006-5831](https://cve.now/CVE-2006-5831.md): PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attack (no CVSS) - [CVE-2006-5832](https://cve.now/CVE-2006-5832.md): All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests (no CVSS) - [CVE-2006-5833](https://cve.now/CVE-2006-5833.md): gbcms\_php\_files/up\_loader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote attackers to cause a d (no CVSS) - [CVE-2006-5834](https://cve.now/CVE-2006-5834.md): Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a (no CVSS) - [CVE-2006-5835](https://cve.now/CVE-2006-5835.md): The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authenticat (no CVSS) - [CVE-2006-5836](https://cve.now/CVE-2006-5836.md): The fpathconf syscall function in bsd/kern/kern\_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows local users to cause a d (no CVSS) - [CVE-2006-5837](https://cve.now/CVE-2006-5837.md): Static code injection vulnerability in chat\_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows remote attackers to i (no CVSS) - [CVE-2006-5838](https://cve.now/CVE-2006-5838.md): PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register\_globals is enabled, a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.