# CVEs published 2006-12-03 10 CVEs were published on December 3, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-6236](https://cve.now/CVE-2006-6236.md): Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co (no CVSS) - [CVE-2006-6237](https://cve.now/CVE-2006-6237.md): SQL injection vulnerability in the decode\_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execu (no CVSS) - [CVE-2006-6238](https://cve.now/CVE-2006-6238.md): The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, wh (no CVSS) - [CVE-2006-6239](https://cve.now/CVE-2006-6239.md): webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password. (no CVSS) - [CVE-2006-6240](https://cve.now/CVE-2006-6240.md): Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to list contents of arbitrary direc (no CVSS) - [CVE-2006-6241](https://cve.now/CVE-2006-6241.md): Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to cause a denial of service (crash) via consecutive RETR commands. (no CVSS) - [CVE-2006-6242](https://cve.now/CVE-2006-6242.md): Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local file (no CVSS) - [CVE-2006-5854](https://cve.now/CVE-2006-5854.md): Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to exec (no CVSS) - [CVE-2006-6120](https://cve.now/CVE-2006-6120.md): Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 a (no CVSS) - [CVE-1999-1590](https://cve.now/CVE-1999-1590.md): Directory traversal vulnerability in Muhammad A. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-12-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.