# Vulnerabilities published in 2006


- [CVE-2006-3599](https://insights.sbomify.com/CVE-2006-3599/): SQL injection in php-nuke:advanced classified module (high 7.5)
- [CVE-2006-3598](https://insights.sbomify.com/CVE-2006-3598/): SQL injection in php-nuke:sections module (high 7.5)
- [CVE-2006-3597](https://insights.sbomify.com/CVE-2006-3597/): Information disclosure in ubuntu:ubuntu linux (high 7.2)
- [CVE-2006-3596](https://insights.sbomify.com/CVE-2006-3596/): Denial of service in cisco:ips sensor software (medium 5.0)
- [CVE-2006-3595](https://insights.sbomify.com/CVE-2006-3595/): Misconfiguration in cisco:router web setup (high 7.5)
- [CVE-2006-3594](https://insights.sbomify.com/CVE-2006-3594/): Memory corruption in cisco:unified callmanager (high 7.5)
- [CVE-2006-3593](https://insights.sbomify.com/CVE-2006-3593/): Other in cisco:unified callmanager (medium 4.0)
- [CVE-2006-3592](https://insights.sbomify.com/CVE-2006-3592/): Privilege escalation in cisco:unified callmanager (medium 4.6)
- [CVE-2006-3591](https://insights.sbomify.com/CVE-2006-3591/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3590](https://insights.sbomify.com/CVE-2006-3590/): Memory corruption in microsoft:powerpoint (medium 5.1)
- [CVE-2006-3589](https://insights.sbomify.com/CVE-2006-3589/): Misconfiguration in vmware:esx (low 3.6)
- [CVE-2006-3588](https://insights.sbomify.com/CVE-2006-3588/): Denial of service in adobe:flash player (low 2.6)
- [CVE-2006-3587](https://insights.sbomify.com/CVE-2006-3587/): Memory corruption in adobe:flash player (medium 5.1)
- [CVE-2006-3586](https://insights.sbomify.com/CVE-2006-3586/): SQL injection in jetbox:jetbox cms (high 7.5)
- [CVE-2006-3585](https://insights.sbomify.com/CVE-2006-3585/): Cross-site scripting in jetbox:jetbox cms (medium 4.3)
- [CVE-2006-3584](https://insights.sbomify.com/CVE-2006-3584/): Code injection in jetbox:jetbox cms (high 7.5)
- [CVE-2006-3583](https://insights.sbomify.com/CVE-2006-3583/): Auth bypass in jetbox:jetbox cms (high 7.5)
- [CVE-2006-3582](https://insights.sbomify.com/CVE-2006-3582/): Memory corruption in audacious media player team:adplug (medium 5.1)
- [CVE-2006-3581](https://insights.sbomify.com/CVE-2006-3581/): Memory corruption in audacious media player team:adplug (medium 5.1)
- [CVE-2006-3580](https://insights.sbomify.com/CVE-2006-3580/): SQL injection in asp stats generator:asp stats generator (high 7.5)
- [CVE-2006-3579](https://insights.sbomify.com/CVE-2006-3579/): Cross-site scripting in fujitsu:serverview (medium 4.3)
- [CVE-2006-3578](https://insights.sbomify.com/CVE-2006-3578/): Path traversal in fujitsu:serverview (medium 5.0)
- [CVE-2006-3577](https://insights.sbomify.com/CVE-2006-3577/): SQL injection in lifetype:lifetype (high 7.5)
- [CVE-2006-3576](https://insights.sbomify.com/CVE-2006-3576/): SQL injection in sensesites:commonsense cms (high 7.5)
- [CVE-2006-3575](https://insights.sbomify.com/CVE-2006-3575/): Denial of service in mcafee:virusscan (low 2.1)
- [CVE-2006-3574](https://insights.sbomify.com/CVE-2006-3574/): Cross-site scripting in hitachi:cosminexus collaboration portal (medium 6.8)
- [CVE-2006-3573](https://insights.sbomify.com/CVE-2006-3573/): Memory corruption in milan mimica:sparklet (critical 10.0)
- [CVE-2006-3572](https://insights.sbomify.com/CVE-2006-3572/): SQL injection in papoo:papoo (high 7.5)
- [CVE-2006-3571](https://insights.sbomify.com/CVE-2006-3571/): Cross-site scripting in papoo:papoo (low 2.6)
- [CVE-2006-3570](https://insights.sbomify.com/CVE-2006-3570/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2006-3569](https://insights.sbomify.com/CVE-2006-3569/): Privilege escalation in ibm:network appliance data ontap (medium 4.6)
- [CVE-2006-3568](https://insights.sbomify.com/CVE-2006-3568/): Cross-site scripting in fantastic guestbook project:fantastic guestbook (medium 4.3)
- [CVE-2006-3567](https://insights.sbomify.com/CVE-2006-3567/): Cross-site scripting in juniper:dx (medium 4.3)
- [CVE-2006-3566](https://insights.sbomify.com/CVE-2006-3566/): Information disclosure in hivemail:hivemail (medium 5.0)
- [CVE-2006-3565](https://insights.sbomify.com/CVE-2006-3565/): SQL injection in hivemail:hivemail (high 7.5)
- [CVE-2006-3564](https://insights.sbomify.com/CVE-2006-3564/): Cross-site scripting in hivemail:hivemail (medium 4.3)
- [CVE-2006-3563](https://insights.sbomify.com/CVE-2006-3563/): Cross-site scripting in winged gallery:winged gallery (low 2.6)
- [CVE-2006-3562](https://insights.sbomify.com/CVE-2006-3562/): Code injection in plume-cms:plume cms (high 7.5)
- [CVE-2006-3561](https://insights.sbomify.com/CVE-2006-3561/): Auth bypass in bt:voyager 2091 wireless adsl router (medium 5.0)
- [CVE-2006-3560](https://insights.sbomify.com/CVE-2006-3560/): SQL injection in blue dojo:graffiti forums (high 7.5)
- [CVE-2006-3559](https://insights.sbomify.com/CVE-2006-3559/): SQL injection in arif supriyanto:auracms (high 7.5)
- [CVE-2006-3558](https://insights.sbomify.com/CVE-2006-3558/): Cross-site scripting in arif supriyanto:auracms (medium 4.3)
- [CVE-2006-3557](https://insights.sbomify.com/CVE-2006-3557/): Information disclosure in mt orumcek:mt orumcek toplist (medium 5.0)
- [CVE-2006-3556](https://insights.sbomify.com/CVE-2006-3556/): Code injection in extcalendar:extcalendar (medium 6.8)
- [CVE-2006-3555](https://insights.sbomify.com/CVE-2006-3555/): Cross-site scripting in php fusion:php fusion (medium 5.8)
- [CVE-2006-3554](https://insights.sbomify.com/CVE-2006-3554/): Path traversal in mkportal:mkportal (high 7.5)
- [CVE-2006-3553](https://insights.sbomify.com/CVE-2006-3553/): Auth bypass in planet concept:planetnews (critical 10.0)
- [CVE-2006-3552](https://insights.sbomify.com/CVE-2006-3552/): Security feature bypass in ipswitch:ipswitch collaboration suite (medium 6.4)
- [CVE-2006-3551](https://insights.sbomify.com/CVE-2006-3551/): Security feature bypass in ncp network communications:secure client (low 1.2)
- [CVE-2006-3550](https://insights.sbomify.com/CVE-2006-3550/): Cross-site scripting in f5:firepass 4100 (low 2.6)
- [CVE-2006-3549](https://insights.sbomify.com/CVE-2006-3549/): Server-side request forgery in horde:horde application framework (medium 5.0)
- [CVE-2006-3548](https://insights.sbomify.com/CVE-2006-3548/): Cross-site scripting in horde:horde (medium 4.3)
- [CVE-2006-3547](https://insights.sbomify.com/CVE-2006-3547/): Denial of service in vmware:player (medium 5.5)
- [CVE-2006-3546](https://insights.sbomify.com/CVE-2006-3546/): Denial of service in ada:imgsvr (medium 5.0)
- [CVE-2006-3545](https://insights.sbomify.com/CVE-2006-3545/): Denial of service in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3544](https://insights.sbomify.com/CVE-2006-3544/): SQL injection in invision power services:invision board (high 7.5)
- [CVE-2006-3543](https://insights.sbomify.com/CVE-2006-3543/): SQL injection in invision power services:invision power board (high 7.5)
- [CVE-2006-3542](https://insights.sbomify.com/CVE-2006-3542/): Cross-site scripting in boxcar media:shopping cart (medium 5.8)
- [CVE-2006-3541](https://insights.sbomify.com/CVE-2006-3541/): SQL injection in kyberna:ky2help (medium 6.5)
- [CVE-2006-3540](https://insights.sbomify.com/CVE-2006-3540/): Denial of service in zonelabs:zonealarm security suite (medium 4.9)
- [CVE-2006-3539](https://insights.sbomify.com/CVE-2006-3539/): Cross-site scripting in dkscript:dragons kingdom script (medium 4.3)
- [CVE-2006-3538](https://insights.sbomify.com/CVE-2006-3538/): Cross-site scripting in beatificfaith:eprayer (medium 5.8)
- [CVE-2006-3537](https://insights.sbomify.com/CVE-2006-3537/): Code injection in randshop:randshop (high 7.5)
- [CVE-2006-3536](https://insights.sbomify.com/CVE-2006-3536/): Code injection in ej3:topo (high 7.5)
- [CVE-2006-3535](https://insights.sbomify.com/CVE-2006-3535/): Path traversal in nullsoft:shoutcast dsp (medium 5.0)
- [CVE-2006-3534](https://insights.sbomify.com/CVE-2006-3534/): Path traversal in nullsoft:shoutcast server (high 7.8)
- [CVE-2006-3533](https://insights.sbomify.com/CVE-2006-3533/): Cross-site scripting in pivot:pivot (medium 5.8)
- [CVE-2006-3532](https://insights.sbomify.com/CVE-2006-3532/): Code injection in pivot:pivot (medium 5.1)
- [CVE-2006-3531](https://insights.sbomify.com/CVE-2006-3531/): Auth bypass in pivot:pivot (high 7.5)
- [CVE-2006-3530](https://insights.sbomify.com/CVE-2006-3530/): Code injection in joomla:pc cookbook (medium 6.8)
- [CVE-2006-3529](https://insights.sbomify.com/CVE-2006-3529/): Denial of service in juniper:junos (medium 5.0)
- [CVE-2006-3528](https://insights.sbomify.com/CVE-2006-3528/): Code injection in mamboxchange:simpleboard (medium 6.8)
- [CVE-2006-3527](https://insights.sbomify.com/CVE-2006-3527/): Code injection in bosdev:bosclassifieds classified ads (high 7.5)
- [CVE-2006-3526](https://insights.sbomify.com/CVE-2006-3526/): Cross-site scripting in sport-slo:sport-slo advanced guestbook (medium 5.8)
- [CVE-2006-3525](https://insights.sbomify.com/CVE-2006-3525/): SQL injection in phpcredo:phcdownload (high 7.5)
- [CVE-2006-3524](https://insights.sbomify.com/CVE-2006-3524/): Memory corruption in sipfoundry:sipxtapi (high 7.5)
- [CVE-2006-3523](https://insights.sbomify.com/CVE-2006-3523/): Denial of service in clearswift:mimesweeper for web (medium 5.0)
- [CVE-2006-3522](https://insights.sbomify.com/CVE-2006-3522/): Cross-site scripting in clearswift:mimesweeper for web (medium 4.3)
- [CVE-2006-3521](https://insights.sbomify.com/CVE-2006-3521/): Cross-site scripting in simian systems inc:siteforge collaborative development platform (medium 5.8)
- [CVE-2006-3520](https://insights.sbomify.com/CVE-2006-3520/): Code injection in sabdrimer cms:sabdrimer cms (high 7.5)
- [CVE-2006-3519](https://insights.sbomify.com/CVE-2006-3519/): Cross-site scripting in native solutions:the banner engine (medium 5.8)
- [CVE-2006-3518](https://insights.sbomify.com/CVE-2006-3518/): SQL injection in webvizyon.net:webvizyon portal (high 7.5)
- [CVE-2006-3517](https://insights.sbomify.com/CVE-2006-3517/): Code injection in rwscripts.com:rw download (high 7.5)
- [CVE-2006-3516](https://insights.sbomify.com/CVE-2006-3516/): SQL injection in freehost:freehost (high 7.5)
- [CVE-2006-3515](https://insights.sbomify.com/CVE-2006-3515/): SQL injection in myiosoft.com:ajaxportal (high 7.5)
- [CVE-2006-3514](https://insights.sbomify.com/CVE-2006-3514/): Cross-site scripting in phpblogger:php-blogger (medium 4.3)
- [CVE-2006-3513](https://insights.sbomify.com/CVE-2006-3513/): Null dereference in microsoft:ie (medium 5.0)
- [CVE-2006-3512](https://insights.sbomify.com/CVE-2006-3512/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3511](https://insights.sbomify.com/CVE-2006-3511/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3510](https://insights.sbomify.com/CVE-2006-3510/): Memory corruption in microsoft:ie (low 2.6)
- [CVE-2006-3509](https://insights.sbomify.com/CVE-2006-3509/): Integer overflow in apple:mac os x (high 7.2)
- [CVE-2006-3508](https://insights.sbomify.com/CVE-2006-3508/): Memory corruption in apple:mac os x (high 7.2)
- [CVE-2006-3507](https://insights.sbomify.com/CVE-2006-3507/): Memory corruption in apple:mac os x (high 7.2)
- [CVE-2006-3506](https://insights.sbomify.com/CVE-2006-3506/): Memory corruption in apple:mac os x (medium 4.6)
- [CVE-2006-3505](https://insights.sbomify.com/CVE-2006-3505/): Use after free in apple:mac os x (high 7.5)
- [CVE-2006-3504](https://insights.sbomify.com/CVE-2006-3504/): Security feature bypass in apple:mac os x (medium 5.1)
- [CVE-2006-3503](https://insights.sbomify.com/CVE-2006-3503/): Integer overflow in apple:mac os x (medium 5.1)
- [CVE-2006-3502](https://insights.sbomify.com/CVE-2006-3502/): Memory corruption in apple:mac os x (medium 5.1)
- [CVE-2006-3501](https://insights.sbomify.com/CVE-2006-3501/): Integer overflow in apple:mac os x (medium 5.1)
- [CVE-2006-3500](https://insights.sbomify.com/CVE-2006-3500/): Privilege escalation in apple:mac os x (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/36/