# Vulnerabilities published in 2006


- [CVE-2006-3915](https://insights.sbomify.com/CVE-2006-3915/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3914](https://insights.sbomify.com/CVE-2006-3914/): Cross-site scripting in blackboard:blackboard academic suite (medium 6.0)
- [CVE-2006-3913](https://insights.sbomify.com/CVE-2006-3913/): Memory corruption in freeciv:freeciv (high 7.5)
- [CVE-2006-3912](https://insights.sbomify.com/CVE-2006-3912/): Memory corruption in rarlab:winrar (low 2.1)
- [CVE-2006-3911](https://insights.sbomify.com/CVE-2006-3911/): Code injection in php live:php live (high 7.5)
- [CVE-2006-3910](https://insights.sbomify.com/CVE-2006-3910/): Null dereference in microsoft:ie (medium 5.0)
- [CVE-2006-3909](https://insights.sbomify.com/CVE-2006-3909/): Cross-site scripting in wired community software:wwwthreads (medium 6.8)
- [CVE-2006-3908](https://insights.sbomify.com/CVE-2006-3908/): Memory corruption in gillius programming:game networking engine (high 7.5)
- [CVE-2006-3907](https://insights.sbomify.com/CVE-2006-3907/): Denial of service in siemens:speedstream wireless router (medium 5.0)
- [CVE-2006-3906](https://insights.sbomify.com/CVE-2006-3906/): Denial of service in cisco:adaptive security appliance software (medium 5.0)
- [CVE-2006-3905](https://insights.sbomify.com/CVE-2006-3905/): SQL injection in mywebland:mybloggie (high 7.5)
- [CVE-2006-3904](https://insights.sbomify.com/CVE-2006-3904/): SQL injection in etomite:etomite (medium 6.8)
- [CVE-2006-3903](https://insights.sbomify.com/CVE-2006-3903/): Cross-site scripting in mywebland:mybloggie (medium 5.8)
- [CVE-2006-3902](https://insights.sbomify.com/CVE-2006-3902/): Cross-site scripting in phpfaber:topsites (medium 4.3)
- [CVE-2006-3901](https://insights.sbomify.com/CVE-2006-3901/): Memory corruption in tumbleweed:mailgate email firewall (high 7.5)
- [CVE-2006-3900](https://insights.sbomify.com/CVE-2006-3900/): Cross-site scripting in tobias kloy:tp-book (medium 6.8)
- [CVE-2006-3899](https://insights.sbomify.com/CVE-2006-3899/): Memory corruption in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3898](https://insights.sbomify.com/CVE-2006-3898/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3897](https://insights.sbomify.com/CVE-2006-3897/): Memory corruption in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3896](https://insights.sbomify.com/CVE-2006-3896/): Auth bypass in neoscale systems:cryptostor tape 700 (medium 4.9)
- [CVE-2006-3894](https://insights.sbomify.com/CVE-2006-3894/): Denial of service in dell:bsafe cert-c (medium 5.0)
- [CVE-2006-3893](https://insights.sbomify.com/CVE-2006-3893/): Memory corruption in casio:photo loader (critical 10.0)
- [CVE-2006-3892](https://insights.sbomify.com/CVE-2006-3892/): Auth bypass in emc:networker (critical 10.0)
- [CVE-2006-3890](https://insights.sbomify.com/CVE-2006-3890/): Memory corruption in sky software:fileview activex control (critical 9.3)
- [CVE-2006-3888](https://insights.sbomify.com/CVE-2006-3888/): Memory corruption in aol:ygp pic downloader activex control (high 7.5)
- [CVE-2006-3887](https://insights.sbomify.com/CVE-2006-3887/): Memory corruption in aol:ygp screensaver activex control (high 7.5)
- [CVE-2006-3886](https://insights.sbomify.com/CVE-2006-3886/): SQL injection in musicbox:musicbox (high 7.5)
- [CVE-2006-3885](https://insights.sbomify.com/CVE-2006-3885/): Path traversal in checkpoint:firewall-1 (medium 5.0)
- [CVE-2006-3884](https://insights.sbomify.com/CVE-2006-3884/): SQL injection in gonafish:linkscaffe (high 7.5)
- [CVE-2006-3883](https://insights.sbomify.com/CVE-2006-3883/): Cross-site scripting in gonafish:linkscaffe (medium 4.3)
- [CVE-2006-3882](https://insights.sbomify.com/CVE-2006-3882/): Information disclosure in musicbox:musicbox (medium 5.0)
- [CVE-2006-3881](https://insights.sbomify.com/CVE-2006-3881/): Cross-site scripting in musicbox:musicbox (medium 4.3)
- [CVE-2006-3880](https://insights.sbomify.com/CVE-2006-3880/): Denial of service in microsoft:windows 2000 (medium 5.0)
- [CVE-2006-3879](https://insights.sbomify.com/CVE-2006-3879/): Integer overflow in miod vallat:mikmod (medium 5.0)
- [CVE-2006-3878](https://insights.sbomify.com/CVE-2006-3878/): Misconfiguration in opsware:network automation system (low 2.1)
- [CVE-2006-3877](https://insights.sbomify.com/CVE-2006-3877/): Code injection in microsoft:access (critical 9.3)
- [CVE-2006-3876](https://insights.sbomify.com/CVE-2006-3876/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-3875](https://insights.sbomify.com/CVE-2006-3875/): Memory corruption in microsoft:excel (medium 5.1)
- [CVE-2006-3873](https://insights.sbomify.com/CVE-2006-3873/): Memory corruption in microsoft:ie (high 7.5)
- [CVE-2006-3869](https://insights.sbomify.com/CVE-2006-3869/): Memory corruption in microsoft:ie (high 7.5)
- [CVE-2006-3868](https://insights.sbomify.com/CVE-2006-3868/): Other in microsoft:office (medium 5.1)
- [CVE-2006-3867](https://insights.sbomify.com/CVE-2006-3867/): Other in microsoft:excel (medium 5.1)
- [CVE-2006-3864](https://insights.sbomify.com/CVE-2006-3864/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-3862](https://insights.sbomify.com/CVE-2006-3862/): Memory corruption in ibm:informix dynamic server (high 7.5)
- [CVE-2006-3861](https://insights.sbomify.com/CVE-2006-3861/): Missing authorization in ibm:informix dynamic server (medium 4.0)
- [CVE-2006-3860](https://insights.sbomify.com/CVE-2006-3860/): Command injection in ibm:informix dynamic database server (high 7.5)
- [CVE-2006-3859](https://insights.sbomify.com/CVE-2006-3859/): Path traversal in ibm:informix dynamic database server (medium 4.0)
- [CVE-2006-3858](https://insights.sbomify.com/CVE-2006-3858/): Information disclosure in ibm:informix dynamic server (low 2.1)
- [CVE-2006-3857](https://insights.sbomify.com/CVE-2006-3857/): Memory corruption in ibm:informix dynamic database server (medium 6.5)
- [CVE-2006-3856](https://insights.sbomify.com/CVE-2006-3856/): Denial of service in ibm:informix dynamic server (low 2.1)
- [CVE-2006-3855](https://insights.sbomify.com/CVE-2006-3855/): Code injection in ibm:informix dynamic server (medium 6.5)
- [CVE-2006-3854](https://insights.sbomify.com/CVE-2006-3854/): Memory corruption in ibm:informix dynamic database server (high 7.5)
- [CVE-2006-3853](https://insights.sbomify.com/CVE-2006-3853/): Memory corruption in ibm:informix dynamic server (medium 5.1)
- [CVE-2006-3852](https://insights.sbomify.com/CVE-2006-3852/): SQL injection in phptoys:micro guestbook (medium 4.3)
- [CVE-2006-3851](https://insights.sbomify.com/CVE-2006-3851/): SQL injection in x7 group:x7 chat (high 7.5)
- [CVE-2006-3850](https://insights.sbomify.com/CVE-2006-3850/): Code injection in lussumo:vanilla (medium 5.1)
- [CVE-2006-3849](https://insights.sbomify.com/CVE-2006-3849/): Memory corruption in pumpkin studios:warzone (high 7.5)
- [CVE-2006-3848](https://insights.sbomify.com/CVE-2006-3848/): Cross-site scripting in krischan jodies:ip calculator (low 2.6)
- [CVE-2006-3847](https://insights.sbomify.com/CVE-2006-3847/): Code injection in canebluem:mospray (medium 5.1)
- [CVE-2006-3846](https://insights.sbomify.com/CVE-2006-3846/): Code injection in mambo:mambo multibanners (medium 6.8)
- [CVE-2006-3845](https://insights.sbomify.com/CVE-2006-3845/): Memory corruption in rarlab:winrar (critical 9.3)
- [CVE-2006-3844](https://insights.sbomify.com/CVE-2006-3844/): Memory corruption in pablo software solutions:quick n easy ftp server (medium 6.5)
- [CVE-2006-3843](https://insights.sbomify.com/CVE-2006-3843/): Code injection in mambo:mambo calendar (high 7.5)
- [CVE-2006-3842](https://insights.sbomify.com/CVE-2006-3842/): Cross-site scripting in adventnet:zoho virtual office (medium 4.3)
- [CVE-2006-3841](https://insights.sbomify.com/CVE-2006-3841/): Cross-site scripting in owasp:webscarab (low 2.6)
- [CVE-2006-3840](https://insights.sbomify.com/CVE-2006-3840/): Denial of service in iss:blackice pc protection (medium 5.0)
- [CVE-2006-3838](https://insights.sbomify.com/CVE-2006-3838/): Memory corruption in eiqnetworks:enterprise security analyzer (critical 10.0)
- [CVE-2006-3837](https://insights.sbomify.com/CVE-2006-3837/): Information disclosure in professional home page tools:professional home page tools guestbook (medium 5.0)
- [CVE-2006-3836](https://insights.sbomify.com/CVE-2006-3836/): Path traversal in unidomedia:chameleon le (medium 5.0)
- [CVE-2006-3835](https://insights.sbomify.com/CVE-2006-3835/): Apache Tomcat Reveals Directories (medium 5.0)
- [CVE-2006-3834](https://insights.sbomify.com/CVE-2006-3834/): Information disclosure in ej3:topo (medium 5.0)
- [CVE-2006-3833](https://insights.sbomify.com/CVE-2006-3833/): Missing authorization in ej3:topo (medium 5.0)
- [CVE-2006-3832](https://insights.sbomify.com/CVE-2006-3832/): SQL injection in gerrit van aaken:loudblog (high 7.5)
- [CVE-2006-3831](https://insights.sbomify.com/CVE-2006-3831/): Information disclosure in kailash nadh:boastmachine (medium 5.0)
- [CVE-2006-3830](https://insights.sbomify.com/CVE-2006-3830/): File upload in kailash nadh:boastmachine (medium 4.0)
- [CVE-2006-3829](https://insights.sbomify.com/CVE-2006-3829/): Cross-site request forgery in kailash nadh:boastmachine (medium 5.0)
- [CVE-2006-3828](https://insights.sbomify.com/CVE-2006-3828/): SQL injection in kailash nadh:boastmachine (medium 6.5)
- [CVE-2006-3827](https://insights.sbomify.com/CVE-2006-3827/): SQL injection in kailash nadh:boastmachine (medium 6.5)
- [CVE-2006-3826](https://insights.sbomify.com/CVE-2006-3826/): Cross-site scripting in kailash nadh:boastmachine (medium 4.3)
- [CVE-2006-3825](https://insights.sbomify.com/CVE-2006-3825/): Security feature bypass in sun:solaris (low 2.1)
- [CVE-2006-3824](https://insights.sbomify.com/CVE-2006-3824/): Integer overflow in sun:solaris (medium 4.9)
- [CVE-2006-3823](https://insights.sbomify.com/CVE-2006-3823/): SQL injection in geodesicsolutions:geoauctions premier (medium 5.1)
- [CVE-2006-3822](https://insights.sbomify.com/CVE-2006-3822/): SQL injection in geodesicsolutions:geoauctions enterprise (medium 5.1)
- [CVE-2006-3821](https://insights.sbomify.com/CVE-2006-3821/): Cross-site scripting in adaptive technology resource centre:atutor (medium 4.3)
- [CVE-2006-3820](https://insights.sbomify.com/CVE-2006-3820/): Cross-site scripting in gerrit van aaken:loudblog (medium 4.3)
- [CVE-2006-3819](https://insights.sbomify.com/CVE-2006-3819/): Code injection in twiki:twiki (high 7.5)
- [CVE-2006-3818](https://insights.sbomify.com/CVE-2006-3818/): Cross-site scripting in novell:groupwise webaccess (medium 4.3)
- [CVE-2006-3817](https://insights.sbomify.com/CVE-2006-3817/): Cross-site scripting in novell:groupwise webaccess (medium 4.3)
- [CVE-2006-3816](https://insights.sbomify.com/CVE-2006-3816/): Information disclosure in krusader:krusader (high 7.5)
- [CVE-2006-3815](https://insights.sbomify.com/CVE-2006-3815/): Misconfiguration in linux-ha:heartbeat (low 2.1)
- [CVE-2006-3814](https://insights.sbomify.com/CVE-2006-3814/): Memory corruption in cheese tracker:cheese tracker (medium 5.1)
- [CVE-2006-3813](https://insights.sbomify.com/CVE-2006-3813/): Other in redhat:enterprise linux (low 2.1)
- [CVE-2006-3812](https://insights.sbomify.com/CVE-2006-3812/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2006-3811](https://insights.sbomify.com/CVE-2006-3811/): Memory corruption in mozilla:firefox (high 7.5)
- [CVE-2006-3810](https://insights.sbomify.com/CVE-2006-3810/): Cross-site scripting in mozilla:firefox (medium 6.8)
- [CVE-2006-3809](https://insights.sbomify.com/CVE-2006-3809/): Privilege escalation in mozilla:firefox (high 7.5)
- [CVE-2006-3808](https://insights.sbomify.com/CVE-2006-3808/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2006-3807](https://insights.sbomify.com/CVE-2006-3807/): Code injection in mozilla:firefox (high 7.5)
- [CVE-2006-3806](https://insights.sbomify.com/CVE-2006-3806/): Integer overflow in mozilla:firefox (high 7.5)
- [CVE-2006-3805](https://insights.sbomify.com/CVE-2006-3805/): Use after free in mozilla:firefox (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/33/