# CVEs published 2006-12-12

17 CVEs were published on December 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5577](https://cve.now/CVE-2006-5577.md): Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML ta (no CVSS)
- [CVE-2006-5578](https://cve.now/CVE-2006-5578.md): Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information vi (no CVSS)
- [CVE-2006-5579](https://cve.now/CVE-2006-5579.md): Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, (no CVSS)
- [CVE-2006-5581](https://cve.now/CVE-2006-5581.md): Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functi (no CVSS)
- [CVE-2006-5583](https://cve.now/CVE-2006-5583.md): Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows (no CVSS)
- [CVE-2006-6335](https://cve.now/CVE-2006-6335.md): Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT ar (no CVSS)
- [CVE-2006-6482](https://cve.now/CVE-2006-6482.md): Adobe ColdFusion MX7 allows remote attackers to obtain sensitive information via a URL request (1) for a non-existent (a) JWS, (b) CFM, (c) (no CVSS)
- [CVE-2006-6483](https://cve.now/CVE-2006-6483.md): Adobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against cross-site scripting (XSS) attacks, which al (no CVSS)
- [CVE-2006-6484](https://cve.now/CVE-2006-6484.md): The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise (no CVSS)
- [CVE-2006-6485](https://cve.now/CVE-2006-6485.md): Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-6486](https://cve.now/CVE-2006-6486.md): SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via unspecified vectors in sptrees/default (no CVSS)
- [CVE-2006-6423](https://cve.now/CVE-2006-6423.md): Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1. (no CVSS)
- [CVE-2006-6481](https://cve.now/CVE-2006-6481.md): Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many (no CVSS)
- [CVE-2006-5873](https://cve.now/CVE-2006-5873.md): Buffer overflow in the cluster\_process\_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 a (no CVSS)
- [CVE-2006-6478](https://cve.now/CVE-2006-6478.md): Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parame (no CVSS)
- [CVE-2006-6479](https://cve.now/CVE-2006-6479.md): Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-6480](https://cve.now/CVE-2006-6480.md): admin/admin\_membre/fiche\_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre paramete (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.