# Vulnerabilities published in 2006


- [CVE-2006-4015](https://insights.sbomify.com/CVE-2006-4015/): Denial of service in hp:procurve switch 3500yl (medium 5.0)
- [CVE-2006-4014](https://insights.sbomify.com/CVE-2006-4014/): Denial of service in symantec:brightmail antispam (medium 5.0)
- [CVE-2006-4013](https://insights.sbomify.com/CVE-2006-4013/): Path traversal in symantec:brightmail antispam (high 7.6)
- [CVE-2006-4012](https://insights.sbomify.com/CVE-2006-4012/): Code injection in savewebportal:savewebportal (medium 5.1)
- [CVE-2006-4011](https://insights.sbomify.com/CVE-2006-4011/): Code injection in kayako:esupport (low 2.6)
- [CVE-2006-4010](https://insights.sbomify.com/CVE-2006-4010/): SQL injection in vwar:virtual war (high 7.5)
- [CVE-2006-4009](https://insights.sbomify.com/CVE-2006-4009/): Cross-site scripting in vwar:virtual war (medium 4.3)
- [CVE-2006-4008](https://insights.sbomify.com/CVE-2006-4008/): Code injection in knusperleicht:faq (high 7.5)
- [CVE-2006-4007](https://insights.sbomify.com/CVE-2006-4007/): Code injection in knusperleicht:knusperleicht guestbook (high 7.5)
- [CVE-2006-4006](https://insights.sbomify.com/CVE-2006-4006/): Information disclosure in bomberclone:bomberclone (medium 5.0)
- [CVE-2006-4005](https://insights.sbomify.com/CVE-2006-4005/): Denial of service in bomberclone:bomberclone (medium 5.0)
- [CVE-2006-4004](https://insights.sbomify.com/CVE-2006-4004/): Path traversal in vbportal:vbportal (medium 6.4)
- [CVE-2006-4003](https://insights.sbomify.com/CVE-2006-4003/): Path traversal in hobbit monitor:hobbit monitor (medium 5.0)
- [CVE-2006-4002](https://insights.sbomify.com/CVE-2006-4002/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2006-4001](https://insights.sbomify.com/CVE-2006-4001/): Hardcoded credentials in barracuda networks:barracuda spam firewall (high 7.5)
- [CVE-2006-4000](https://insights.sbomify.com/CVE-2006-4000/): Path traversal in barracuda networks:barracuda spam firewall (medium 4.0)
- [CVE-2006-3999](https://insights.sbomify.com/CVE-2006-3999/): Security feature bypass in iss:blackice pc protection (medium 4.6)
- [CVE-2006-3998](https://insights.sbomify.com/CVE-2006-3998/): Code injection in wowroster:wowroster (high 7.5)
- [CVE-2006-3997](https://insights.sbomify.com/CVE-2006-3997/): Code injection in wowroster:wowroster (high 7.5)
- [CVE-2006-3996](https://insights.sbomify.com/CVE-2006-3996/): SQL injection in adaptive technology resource centre:atutor (medium 6.5)
- [CVE-2006-3995](https://insights.sbomify.com/CVE-2006-3995/): Code injection in user home pages:user home pages (medium 6.8)
- [CVE-2006-3994](https://insights.sbomify.com/CVE-2006-3994/): SQL injection in xmb software:xmb forum (high 7.5)
- [CVE-2006-3993](https://insights.sbomify.com/CVE-2006-3993/): Code injection in tsep:tsep (medium 5.1)
- [CVE-2006-3992](https://insights.sbomify.com/CVE-2006-3992/): Memory corruption in intel:2200bg proset wireless (medium 5.1)
- [CVE-2006-3991](https://insights.sbomify.com/CVE-2006-3991/): Code injection in voc-project:voodoo chat (high 7.5)
- [CVE-2006-3990](https://insights.sbomify.com/CVE-2006-3990/): Code injection in phpsavant:savant2 (high 7.5)
- [CVE-2006-3989](https://insights.sbomify.com/CVE-2006-3989/): Code injection in knusperleicht:shoutbox (medium 5.1)
- [CVE-2006-3988](https://insights.sbomify.com/CVE-2006-3988/): Code injection in knusperleicht:newsreporter (medium 5.1)
- [CVE-2006-3987](https://insights.sbomify.com/CVE-2006-3987/): Code injection in knusperleicht:knusperleicht filemanager (medium 5.1)
- [CVE-2006-3986](https://insights.sbomify.com/CVE-2006-3986/): Code injection in knusperleicht:newsletter (high 7.5)
- [CVE-2006-3985](https://insights.sbomify.com/CVE-2006-3985/): Memory corruption in conexware:powerarchiver (critical 9.3)
- [CVE-2006-3984](https://insights.sbomify.com/CVE-2006-3984/): Code injection in gianluca baldo:phpauction (high 7.5)
- [CVE-2006-3983](https://insights.sbomify.com/CVE-2006-3983/): Code injection in ekilat llc:php\(reactor\) (high 7.5)
- [CVE-2006-3982](https://insights.sbomify.com/CVE-2006-3982/): Code injection in knusperleicht:quickie (high 7.5)
- [CVE-2006-3981](https://insights.sbomify.com/CVE-2006-3981/): Code injection in mambo:mambo gallery manager (high 7.5)
- [CVE-2006-3980](https://insights.sbomify.com/CVE-2006-3980/): Code injection in mambo:mambo gallery manager (medium 6.8)
- [CVE-2006-3979](https://insights.sbomify.com/CVE-2006-3979/): Auth bypass in macromedia:coldfusion (high 7.2)
- [CVE-2006-3978](https://insights.sbomify.com/CVE-2006-3978/): Other in adobe:coldfusion (medium 4.6)
- [CVE-2006-3977](https://insights.sbomify.com/CVE-2006-3977/): Other in broadcom:etrust antivirus webscan (critical 9.3)
- [CVE-2006-3976](https://insights.sbomify.com/CVE-2006-3976/): Other in broadcom:etrust antivirus webscan (critical 9.3)
- [CVE-2006-3975](https://insights.sbomify.com/CVE-2006-3975/): Memory corruption in broadcom:etrust antivirus webscan (high 7.5)
- [CVE-2006-3974](https://insights.sbomify.com/CVE-2006-3974/): Cross-site scripting in 3com:3cr860-95 (medium 4.3)
- [CVE-2006-3973](https://insights.sbomify.com/CVE-2006-3973/): Privilege escalation in my firewall plus:my firewall plus (high 7.2)
- [CVE-2006-3972](https://insights.sbomify.com/CVE-2006-3972/): Path traversal in scott weedon:ajax chat (medium 5.0)
- [CVE-2006-3971](https://insights.sbomify.com/CVE-2006-3971/): Cross-site scripting in scott weedon:ajax chat (medium 6.8)
- [CVE-2006-3970](https://insights.sbomify.com/CVE-2006-3970/): Code injection in joomla:lmo (high 7.5)
- [CVE-2006-3969](https://insights.sbomify.com/CVE-2006-3969/): Code injection in joomla:colophon (high 7.5)
- [CVE-2006-3968](https://insights.sbomify.com/CVE-2006-3968/): Weak cryptography in sun:solaris (medium 5.0)
- [CVE-2006-3967](https://insights.sbomify.com/CVE-2006-3967/): Code injection in moskool:moskool (high 7.5)
- [CVE-2006-3966](https://insights.sbomify.com/CVE-2006-3966/): Code injection in carlos sanchez valle:mynewsgroups (high 7.5)
- [CVE-2006-3965](https://insights.sbomify.com/CVE-2006-3965/): Information disclosure in banex:banex (medium 5.0)
- [CVE-2006-3964](https://insights.sbomify.com/CVE-2006-3964/): Code injection in banex:banex (high 7.5)
- [CVE-2006-3963](https://insights.sbomify.com/CVE-2006-3963/): SQL injection in banex:banex (high 7.5)
- [CVE-2006-3962](https://insights.sbomify.com/CVE-2006-3962/): Code injection in mambo:bayesiannaivefilter (high 7.5)
- [CVE-2006-3961](https://insights.sbomify.com/CVE-2006-3961/): Memory corruption in mcafee:antispyware (medium 6.8)
- [CVE-2006-3960](https://insights.sbomify.com/CVE-2006-3960/): SQL injection in x-scripts:x-poll (high 7.5)
- [CVE-2006-3959](https://insights.sbomify.com/CVE-2006-3959/): SQL injection in x-scripts:x-statistics (high 7.5)
- [CVE-2006-3958](https://insights.sbomify.com/CVE-2006-3958/): Cross-site scripting in pkr internet:taskjitsu (medium 4.3)
- [CVE-2006-3957](https://insights.sbomify.com/CVE-2006-3957/): Code injection in bosdev:bosdates (high 7.5)
- [CVE-2006-3956](https://insights.sbomify.com/CVE-2006-3956/): Cross-site scripting in total online solutions:advanced webhost billing system (medium 4.3)
- [CVE-2006-3955](https://insights.sbomify.com/CVE-2006-3955/): Code injection in minibb:minibb (high 7.5)
- [CVE-2006-3954](https://insights.sbomify.com/CVE-2006-3954/): Path traversal in mybulletinboard:mybulletinboard (medium 5.0)
- [CVE-2006-3953](https://insights.sbomify.com/CVE-2006-3953/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-3952](https://insights.sbomify.com/CVE-2006-3952/): Memory corruption in efs software:efs ftp server (high 7.5)
- [CVE-2006-3951](https://insights.sbomify.com/CVE-2006-3951/): Code injection in mam-moodle alpha component:mam-moodle alpha component (high 7.5)
- [CVE-2006-3950](https://insights.sbomify.com/CVE-2006-3950/): SQL injection in x-scripts:x-statistics (high 7.5)
- [CVE-2006-3949](https://insights.sbomify.com/CVE-2006-3949/): Code injection in mambo:artlinks component (medium 6.8)
- [CVE-2006-3948](https://insights.sbomify.com/CVE-2006-3948/): Cross-site scripting in php-nuke:inp (medium 4.3)
- [CVE-2006-3947](https://insights.sbomify.com/CVE-2006-3947/): Code injection in mambo:mambatstaff (medium 6.8)
- [CVE-2006-3946](https://insights.sbomify.com/CVE-2006-3946/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2006-3945](https://insights.sbomify.com/CVE-2006-3945/): Memory corruption in opera:opera browser (medium 5.0)
- [CVE-2006-3944](https://insights.sbomify.com/CVE-2006-3944/): Integer overflow in microsoft:ie (medium 5.0)
- [CVE-2006-3943](https://insights.sbomify.com/CVE-2006-3943/): Memory corruption in microsoft:ie (low 2.6)
- [CVE-2006-3942](https://insights.sbomify.com/CVE-2006-3942/): Null dereference in microsoft:windows 2000 (high 7.8)
- [CVE-2006-3941](https://insights.sbomify.com/CVE-2006-3941/): Memory corruption in sun:n1 grid engine (high 7.5)
- [CVE-2006-3940](https://insights.sbomify.com/CVE-2006-3940/): SQL injection in phpbb group:phpbb-auction (high 7.5)
- [CVE-2006-3939](https://insights.sbomify.com/CVE-2006-3939/): Missing authorization in scriptscenter:ezupload pro (high 7.5)
- [CVE-2006-3938](https://insights.sbomify.com/CVE-2006-3938/): Information disclosure in dotclear:dotclear (medium 5.0)
- [CVE-2006-3937](https://insights.sbomify.com/CVE-2006-3937/): Information disclosure in xguestbook:xguestbook (medium 5.0)
- [CVE-2006-3936](https://insights.sbomify.com/CVE-2006-3936/): Alkacon OpenCms Exposes JSP Source Code (medium 4.0)
- [CVE-2006-3935](https://insights.sbomify.com/CVE-2006-3935/): Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp (medium 6.5)
- [CVE-2006-3934](https://insights.sbomify.com/CVE-2006-3934/): Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter (medium 4.0)
- [CVE-2006-3933](https://insights.sbomify.com/CVE-2006-3933/): Alkacon OpenCms XSS via unsanitized message body (low 3.5)
- [CVE-2006-3932](https://insights.sbomify.com/CVE-2006-3932/): SQL injection in gonafish:linkscaffe (medium 5.1)
- [CVE-2006-3931](https://insights.sbomify.com/CVE-2006-3931/): Memory corruption in tuomas airaksinen:midirecord (medium 4.6)
- [CVE-2006-3930](https://insights.sbomify.com/CVE-2006-3930/): Code injection in mamboxchange:a6mambohelpdesk (high 7.5)
- [CVE-2006-3929](https://insights.sbomify.com/CVE-2006-3929/): Cross-site scripting in zyxel:prestige 660h-61 (medium 4.3)
- [CVE-2006-3928](https://insights.sbomify.com/CVE-2006-3928/): Code injection in mikael software:wmnews (high 7.5)
- [CVE-2006-3927](https://insights.sbomify.com/CVE-2006-3927/): Cross-site scripting in php pro bid:php pro bid (medium 4.3)
- [CVE-2006-3926](https://insights.sbomify.com/CVE-2006-3926/): SQL injection in php pro bid:php pro bid (high 7.5)
- [CVE-2006-3925](https://insights.sbomify.com/CVE-2006-3925/): Memory corruption in interactual technologies:interactual player (medium 6.4)
- [CVE-2006-3924](https://insights.sbomify.com/CVE-2006-3924/): Cross-site scripting in dokeos:dokeos (medium 4.3)
- [CVE-2006-3923](https://insights.sbomify.com/CVE-2006-3923/): Cross-site scripting in fire-mouse:fire-mouse toplist (low 2.6)
- [CVE-2006-3922](https://insights.sbomify.com/CVE-2006-3922/): Code injection in portailphp:portailphp (high 7.5)
- [CVE-2006-3921](https://insights.sbomify.com/CVE-2006-3921/): Path traversal in sun:java system application server (medium 4.0)
- [CVE-2006-3920](https://insights.sbomify.com/CVE-2006-3920/): Denial of service in sun:solaris (medium 5.0)
- [CVE-2006-3919](https://insights.sbomify.com/CVE-2006-3919/): SQL injection in sd studio:sd studio cms (high 7.5)
- [CVE-2006-3918](https://insights.sbomify.com/CVE-2006-3918/): Cross-site scripting in apache:http server (medium 4.3)
- [CVE-2006-3917](https://insights.sbomify.com/CVE-2006-3917/): Code injection in r. corson:php forge (high 7.5)
- [CVE-2006-3916](https://insights.sbomify.com/CVE-2006-3916/): Cross-site scripting in solucija:snews (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/32/