# CVEs published 2006-11-22

38 CVEs were published on November 22, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3973](https://cve.now/CVE-2006-3973.md): My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" featu (no CVSS)
- [CVE-2006-6063](https://cve.now/CVE-2006-6063.md): Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containin (no CVSS)
- [CVE-2006-6064](https://cve.now/CVE-2006-6064.md): Multiple buffer overflows in the Message Parsing Interpreter (MPI) in Fuzzball MUCK before 6.07 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-6065](https://cve.now/CVE-2006-6065.md): PHP remote file inclusion vulnerability in includes/mx\_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to ex (no CVSS)
- [CVE-2006-6066](https://cve.now/CVE-2006-6066.md): Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-6067](https://cve.now/CVE-2006-6067.md): Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-6068](https://cve.now/CVE-2006-6068.md): Directory traversal vulnerability in the cached\_album function in functions.php for mAlbum 0.3 and earlier allows remote attackers to list f (no CVSS)
- [CVE-2006-6069](https://cve.now/CVE-2006-6069.md): index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal parameter. (no CVSS)
- [CVE-2006-6070](https://cve.now/CVE-2006-6070.md): SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2006-5868](https://cve.now/CVE-2006-5868.md): Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via (no CVSS)
- [CVE-2006-6053](https://cve.now/CVE-2006-6053.md): The ext3fs\_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed (no CVSS)
- [CVE-2006-6054](https://cve.now/CVE-2006-6054.md): The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed da (no CVSS)
- [CVE-2006-6055](https://cve.now/CVE-2006-6055.md): Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2006-6056](https://cve.now/CVE-2006-6056.md): Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (no CVSS)
- [CVE-2006-6057](https://cve.now/CVE-2006-6057.md): The Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly other operating systems, allows local users (no CVSS)
- [CVE-2006-6058](https://cve.now/CVE-2006-6058.md): The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via (no CVSS)
- [CVE-2006-6059](https://cve.now/CVE-2006-6059.md): Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-6060](https://cve.now/CVE-2006-6060.md): The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (C (no CVSS)
- [CVE-2006-6061](https://cve.now/CVE-2006-6061.md): com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2006-6062](https://cve.now/CVE-2006-6062.md): Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2006-6035](https://cve.now/CVE-2006-6035.md): Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-6036](https://cve.now/CVE-2006-6036.md): SQL injection vulnerability in OpenHuman before 1.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2006-6037](https://cve.now/CVE-2006-6037.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dan Jensen Travelsized CMS 0.4.1 and earlier allow remote attackers to i (no CVSS)
- [CVE-2006-6038](https://cve.now/CVE-2006-6038.md): SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-6039](https://cve.now/CVE-2006-6039.md): SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2006-6040](https://cve.now/CVE-2006-6040.md): Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitra (no CVSS)
- [CVE-2006-6041](https://cve.now/CVE-2006-6041.md): Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, (no CVSS)
- [CVE-2006-6042](https://cve.now/CVE-2006-6042.md): PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register\_globals is enabled, allows remot (no CVSS)
- [CVE-2006-6043](https://cve.now/CVE-2006-6043.md): PHP file inclusion vulnerability in loginform-inc.php in Oliver (formerly Webshare) 1.2.2 and earlier, when register\_globals is enabled, all (no CVSS)
- [CVE-2006-6044](https://cve.now/CVE-2006-6044.md): PHP remote file inclusion vulnerability in gallery\_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attackers to execute arbitra (no CVSS)
- [CVE-2006-6045](https://cve.now/CVE-2006-6045.md): Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2006-6046](https://cve.now/CVE-2006-6046.md): Multiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2006-6047](https://cve.now/CVE-2006-6047.md): Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute (no CVSS)
- [CVE-2006-6048](https://cve.now/CVE-2006-6048.md): SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-6049](https://cve.now/CVE-2006-6049.md): PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com\_shambo2) component for Mambo 4.5 allows remote attackers to execu (no CVSS)
- [CVE-2006-6050](https://cve.now/CVE-2006-6050.md): Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1) selPl (no CVSS)
- [CVE-2006-6051](https://cve.now/CVE-2006-6051.md): PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com\_reporter) component for Mambo and Joomla! allows remot (no CVSS)
- [CVE-2006-6052](https://cve.now/CVE-2006-6052.md): NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote atta (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.