# CVEs published 2006-12-05

15 CVEs were published on December 5, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6142](https://cve.now/CVE-2006-6142.md): Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-6289](https://cve.now/CVE-2006-6289.md): Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value match (no CVSS)
- [CVE-2006-6290](https://cve.now/CVE-2006-6290.md): Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and (no CVSS)
- [CVE-2006-6291](https://cve.now/CVE-2006-6291.md): Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise (no CVSS)
- [CVE-2006-6292](https://cve.now/CVE-2006-6292.md): Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac mini, MacBook, and MacBook Pro with Core Duo hardware allows remote attacker (no CVSS)
- [CVE-2006-6293](https://cve.now/CVE-2006-6293.md): Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2006-6294](https://cve.now/CVE-2006-6294.md): Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2006-6295](https://cve.now/CVE-2006-6295.md): PHP remote file inclusion vulnerability in includes/mx\_common.php in the mx\_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers (no CVSS)
- [CVE-2006-6296](https://cve.now/CVE-2006-6296.md): The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP (no CVSS)
- [CVE-2006-6297](https://cve.now/CVE-2006-6297.md): Stack consumption vulnerability in the KFILE JPEG (kfile\_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image b (no CVSS)
- [CVE-2006-6298](https://cve.now/CVE-2006-6298.md): SQL injection vulnerability in uye\_giris\_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2006-6299](https://cve.now/CVE-2006-6299.md): Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to (no CVSS)
- [CVE-2006-6300](https://cve.now/CVE-2006-6300.md): Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result par (no CVSS)
- [CVE-2006-6306](https://cve.now/CVE-2006-6306.md): Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physica (no CVSS)
- [CVE-2006-6307](https://cve.now/CVE-2006-6307.md): srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted pack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.