# CVEs published 2006-12-27 33 CVEs were published on December 27, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-6769](https://cve.now/CVE-2006-6769.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2006-6770](https://cve.now/CVE-2006-6770.md): Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register\_globals is enabled, allow remote (no CVSS) - [CVE-2006-6771](https://cve.now/CVE-2006-6771.md): Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register\_globals is enabled, allow remote attackers (no CVSS) - [CVE-2006-6772](https://cve.now/CVE-2006-6772.md): Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remo (no CVSS) - [CVE-2006-6773](https://cve.now/CVE-2006-6773.md): pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is\_admi (no CVSS) - [CVE-2006-6774](https://cve.now/CVE-2006-6774.md): PHP remote file inclusion vulnerability in socios/maquetacion\_socio.php (members/maquetacion\_member.php) in Ciberia Content Federator 1.0 al (no CVSS) - [CVE-2006-6775](https://cve.now/CVE-2006-6775.md): acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command. (no CVSS) - [CVE-2006-6768](https://cve.now/CVE-2006-6768.md): Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to in (no CVSS) - [CVE-2006-6761](https://cve.now/CVE-2006-6761.md): Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi (no CVSS) - [CVE-2006-6762](https://cve.now/CVE-2006-6762.md): The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND com (no CVSS) - [CVE-2006-6763](https://cve.now/CVE-2006-6763.md): Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to execute arbitrary PHP (no CVSS) - [CVE-2006-6764](https://cve.now/CVE-2006-6764.md): PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows rem (no CVSS) - [CVE-2006-6765](https://cve.now/CVE-2006-6765.md): Multiple PHP file inclusion vulnerabilities in src/admin/pt\_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-6766](https://cve.now/CVE-2006-6766.md): Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspeci (no CVSS) - [CVE-2006-6424](https://cve.now/CVE-2006-6424.md): Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to (no CVSS) - [CVE-2006-6425](https://cve.now/CVE-2006-6425.md): Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi (no CVSS) - [CVE-2006-6753](https://cve.now/CVE-2006-6753.md): Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make (no CVSS) - [CVE-2006-6754](https://cve.now/CVE-2006-6754.md): Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the story\_id parameter to (no CVSS) - [CVE-2006-6755](https://cve.now/CVE-2006-6755.md): Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim\_api.php, which (no CVSS) - [CVE-2006-6756](https://cve.now/CVE-2006-6756.md): The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP\_CODE in mainfile.php, which might allo (no CVSS) - [CVE-2006-6757](https://cve.now/CVE-2006-6757.md): Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtai (no CVSS) - [CVE-2006-6758](https://cve.now/CVE-2006-6758.md): Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-6759](https://cve.now/CVE-2006-6759.md): A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Exp (no CVSS) - [CVE-2006-6760](https://cve.now/CVE-2006-6760.md): Multiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and earlier allow remote attackers to execute arbitra (no CVSS) - [CVE-2003-1313](https://cve.now/CVE-2003-1313.md): Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attackers to execute arbitra (no CVSS) - [CVE-2003-1314](https://cve.now/CVE-2003-1314.md): PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2006-6746](https://cve.now/CVE-2006-6746.md): Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the id\_ (no CVSS) - [CVE-2006-6747](https://cve.now/CVE-2006-6747.md): SQL injection vulnerability in show\_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the id\_news parame (no CVSS) - [CVE-2006-6748](https://cve.now/CVE-2006-6748.md): PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-6749](https://cve.now/CVE-2006-6749.md): Buffer overflow in the parse\_expression function in parse\_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str (no CVSS) - [CVE-2006-6750](https://cve.now/CVE-2006-6750.md): Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (application crash) vi (no CVSS) - [CVE-2006-6751](https://cve.now/CVE-2006-6751.md): Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (application crash) vi (no CVSS) - [CVE-2006-6752](https://cve.now/CVE-2006-6752.md): Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-12-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.