# Vulnerabilities published in 2006


- [CVE-2006-3499](https://insights.sbomify.com/CVE-2006-3499/): Information disclosure in apple:mac os x (low 2.1)
- [CVE-2006-3498](https://insights.sbomify.com/CVE-2006-3498/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2006-3497](https://insights.sbomify.com/CVE-2006-3497/): Memory corruption in apple:mac os x (medium 5.1)
- [CVE-2006-3496](https://insights.sbomify.com/CVE-2006-3496/): Denial of service in apple:mac os x (medium 5.0)
- [CVE-2006-3495](https://insights.sbomify.com/CVE-2006-3495/): Information disclosure in apple:mac os x (low 2.1)
- [CVE-2006-3494](https://insights.sbomify.com/CVE-2006-3494/): Cross-site scripting in vastal i-tech:buddy zone (medium 6.8)
- [CVE-2006-3493](https://insights.sbomify.com/CVE-2006-3493/): Memory corruption in microsoft:office (medium 5.1)
- [CVE-2006-3492](https://insights.sbomify.com/CVE-2006-3492/): Denial of service in mico:mico (medium 5.0)
- [CVE-2006-3491](https://insights.sbomify.com/CVE-2006-3491/): Memory corruption in christophe thibault:kaillera (high 7.5)
- [CVE-2006-3490](https://insights.sbomify.com/CVE-2006-3490/): Security feature bypass in f-secure:f-secure anti-virus (medium 5.0)
- [CVE-2006-3489](https://insights.sbomify.com/CVE-2006-3489/): Security feature bypass in f-secure:f-secure anti-virus (medium 5.0)
- [CVE-2006-3488](https://insights.sbomify.com/CVE-2006-3488/): Path traversal in virtuastore:virtuastore (medium 5.0)
- [CVE-2006-3487](https://insights.sbomify.com/CVE-2006-3487/): Information disclosure in virtuastore:virtuastore (medium 5.0)
- [CVE-2006-3486](https://insights.sbomify.com/CVE-2006-3486/): Memory corruption in mysql:mysql (low 2.1)
- [CVE-2006-3485](https://insights.sbomify.com/CVE-2006-3485/): SQL injection in astrodog press:some chess (high 7.5)
- [CVE-2006-3484](https://insights.sbomify.com/CVE-2006-3484/): Cross-site scripting in adaptive technology resource centre:atutor (low 2.6)
- [CVE-2006-3483](https://insights.sbomify.com/CVE-2006-3483/): Information disclosure in phpmaillist:phpmaillist (medium 5.0)
- [CVE-2006-3482](https://insights.sbomify.com/CVE-2006-3482/): Cross-site scripting in phpmaillist:phpmaillist (low 2.6)
- [CVE-2006-3481](https://insights.sbomify.com/CVE-2006-3481/): SQL injection in joomla:joomla (high 7.5)
- [CVE-2006-3480](https://insights.sbomify.com/CVE-2006-3480/): Cross-site scripting in joomla:joomla (medium 5.8)
- [CVE-2006-3479](https://insights.sbomify.com/CVE-2006-3479/): Cross-site request forgery in nuked-klan:nuked-klan (medium 5.0)
- [CVE-2006-3478](https://insights.sbomify.com/CVE-2006-3478/): Code injection in myphp cms:myphp cms (high 7.5)
- [CVE-2006-3477](https://insights.sbomify.com/CVE-2006-3477/): Denial of service in stalker:communigate (medium 5.0)
- [CVE-2006-3476](https://insights.sbomify.com/CVE-2006-3476/): Cross-site scripting in phpwebgallery:phpwebgallery (medium 4.3)
- [CVE-2006-3475](https://insights.sbomify.com/CVE-2006-3475/): Code injection in free qboard:free qboard (high 7.5)
- [CVE-2006-3474](https://insights.sbomify.com/CVE-2006-3474/): SQL injection in belchior foundry:vcard (high 7.5)
- [CVE-2006-3473](https://insights.sbomify.com/CVE-2006-3473/): Other in drupal:form mail module (high 7.5)
- [CVE-2006-3472](https://insights.sbomify.com/CVE-2006-3472/): Denial of service in microsoft:ie (medium 5.0)
- [CVE-2006-3471](https://insights.sbomify.com/CVE-2006-3471/): Null dereference in microsoft:ie (medium 5.0)
- [CVE-2006-3470](https://insights.sbomify.com/CVE-2006-3470/): Misconfiguration in dell:openmanage cd (high 7.5)
- [CVE-2006-3469](https://insights.sbomify.com/CVE-2006-3469/): Memory corruption in mysql:mysql (medium 4.0)
- [CVE-2006-3468](https://insights.sbomify.com/CVE-2006-3468/): Denial of service in linux:linux kernel (high 7.8)
- [CVE-2006-3467](https://insights.sbomify.com/CVE-2006-3467/): Integer overflow in freetype:freetype (high 7.5)
- [CVE-2006-3465](https://insights.sbomify.com/CVE-2006-3465/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-3464](https://insights.sbomify.com/CVE-2006-3464/): Integer overflow in libtiff:libtiff (high 7.5)
- [CVE-2006-3463](https://insights.sbomify.com/CVE-2006-3463/): Denial of service in libtiff:libtiff (high 7.8)
- [CVE-2006-3462](https://insights.sbomify.com/CVE-2006-3462/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-3461](https://insights.sbomify.com/CVE-2006-3461/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-3460](https://insights.sbomify.com/CVE-2006-3460/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-3459](https://insights.sbomify.com/CVE-2006-3459/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-3458](https://insights.sbomify.com/CVE-2006-3458/): Zope allows local users to read arbitrary files (low 2.1)
- [CVE-2006-3457](https://insights.sbomify.com/CVE-2006-3457/): Weak cryptography in symantec:on-demand agent (low 2.1)
- [CVE-2006-3456](https://insights.sbomify.com/CVE-2006-3456/): Code injection in symantec:norton antivirus (high 8.5)
- [CVE-2006-3455](https://insights.sbomify.com/CVE-2006-3455/): Memory corruption in symantec:client security (medium 4.3)
- [CVE-2006-3454](https://insights.sbomify.com/CVE-2006-3454/): Memory corruption in symantec:client security (high 7.2)
- [CVE-2006-3453](https://insights.sbomify.com/CVE-2006-3453/): Memory corruption in adobe:acrobat (medium 5.1)
- [CVE-2006-3452](https://insights.sbomify.com/CVE-2006-3452/): Misconfiguration in adobe:acrobat (medium 4.6)
- [CVE-2006-3451](https://insights.sbomify.com/CVE-2006-3451/): Memory corruption in microsoft:ie (high 7.5)
- [CVE-2006-3450](https://insights.sbomify.com/CVE-2006-3450/): Code injection in microsoft:ie (high 7.5)
- [CVE-2006-3449](https://insights.sbomify.com/CVE-2006-3449/): Memory corruption in microsoft:powerpoint (high 7.5)
- [CVE-2006-3448](https://insights.sbomify.com/CVE-2006-3448/): Memory corruption in microsoft:step-by-step interactive training (critical 9.3)
- [CVE-2006-3445](https://insights.sbomify.com/CVE-2006-3445/): Integer overflow in microsoft:windows 2000 (high 7.5)
- [CVE-2006-3444](https://insights.sbomify.com/CVE-2006-3444/): Memory corruption in microsoft:windows 2000 (high 7.5)
- [CVE-2006-3443](https://insights.sbomify.com/CVE-2006-3443/): Privilege escalation in microsoft:windows 2000 (high 7.2)
- [CVE-2006-3442](https://insights.sbomify.com/CVE-2006-3442/): Code injection in microsoft:windows xp (high 7.6)
- [CVE-2006-3441](https://insights.sbomify.com/CVE-2006-3441/): Memory corruption in microsoft:windows 2000 (critical 10.0)
- [CVE-2006-3440](https://insights.sbomify.com/CVE-2006-3440/): Memory corruption in microsoft:windows 2000 (critical 10.0)
- [CVE-2006-3439](https://insights.sbomify.com/CVE-2006-3439/): Memory corruption in microsoft:windows 2000 (critical 10.0)
- [CVE-2006-3438](https://insights.sbomify.com/CVE-2006-3438/): Memory corruption in microsoft:hyperlink object library (critical 9.3)
- [CVE-2006-3436](https://insights.sbomify.com/CVE-2006-3436/): Cross-site scripting in microsoft:.net framework (medium 4.3)
- [CVE-2006-3435](https://insights.sbomify.com/CVE-2006-3435/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-3434](https://insights.sbomify.com/CVE-2006-3434/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-3431](https://insights.sbomify.com/CVE-2006-3431/): Memory corruption in microsoft:excel (high 7.5)
- [CVE-2006-3430](https://insights.sbomify.com/CVE-2006-3430/): SQL injection in lumension:patchlink update server (high 7.5)
- [CVE-2006-3429](https://insights.sbomify.com/CVE-2006-3429/): Cross-site scripting in tigertom scripts:ttcalc script (medium 4.3)
- [CVE-2006-3428](https://insights.sbomify.com/CVE-2006-3428/): Cross-site scripting in tigertom scripts:ttcalc script (medium 4.3)
- [CVE-2006-3427](https://insights.sbomify.com/CVE-2006-3427/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3426](https://insights.sbomify.com/CVE-2006-3426/): Path traversal in lumension:patchlink update server (medium 5.0)
- [CVE-2006-3425](https://insights.sbomify.com/CVE-2006-3425/): Missing authorization in lumension:patchlink update server (high 7.5)
- [CVE-2006-3424](https://insights.sbomify.com/CVE-2006-3424/): Memory corruption in webex communications:webex downloader activex control (high 7.5)
- [CVE-2006-3423](https://insights.sbomify.com/CVE-2006-3423/): Code injection in webex communications:downloader activexcontrol (critical 9.3)
- [CVE-2006-3422](https://insights.sbomify.com/CVE-2006-3422/): Code injection in wonderedit:wonderedit pro cms (high 7.5)
- [CVE-2006-3421](https://insights.sbomify.com/CVE-2006-3421/): Code injection in smartsitecms:smartsitecms (medium 5.1)
- [CVE-2006-3420](https://insights.sbomify.com/CVE-2006-3420/): Cross-site request forgery in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2006-3419](https://insights.sbomify.com/CVE-2006-3419/): Weak cryptography in tor:tor (medium 5.0)
- [CVE-2006-3418](https://insights.sbomify.com/CVE-2006-3418/): Security feature bypass in tor:tor (medium 5.0)
- [CVE-2006-3417](https://insights.sbomify.com/CVE-2006-3417/): Security feature bypass in tor:tor (medium 6.4)
- [CVE-2006-3416](https://insights.sbomify.com/CVE-2006-3416/): Denial of service in tor:tor (medium 5.0)
- [CVE-2006-3415](https://insights.sbomify.com/CVE-2006-3415/): Security feature bypass in tor:tor (medium 6.4)
- [CVE-2006-3414](https://insights.sbomify.com/CVE-2006-3414/): Other in tor:tor (medium 5.0)
- [CVE-2006-3413](https://insights.sbomify.com/CVE-2006-3413/): Information disclosure in tor:tor (medium 5.0)
- [CVE-2006-3412](https://insights.sbomify.com/CVE-2006-3412/): Security feature bypass in tor:tor (medium 6.4)
- [CVE-2006-3411](https://insights.sbomify.com/CVE-2006-3411/): Weak cryptography in tor:tor (medium 6.4)
- [CVE-2006-3410](https://insights.sbomify.com/CVE-2006-3410/): Weak cryptography in tor:tor (medium 5.0)
- [CVE-2006-3409](https://insights.sbomify.com/CVE-2006-3409/): Integer overflow in tor:tor (high 7.5)
- [CVE-2006-3408](https://insights.sbomify.com/CVE-2006-3408/): Denial of service in tor:tor (medium 5.0)
- [CVE-2006-3407](https://insights.sbomify.com/CVE-2006-3407/): Other in tor:tor (medium 6.4)
- [CVE-2006-3406](https://insights.sbomify.com/CVE-2006-3406/): Path traversal in qto:qtofilemanager (medium 6.4)
- [CVE-2006-3405](https://insights.sbomify.com/CVE-2006-3405/): Cross-site scripting in qto:qtofilemanager (medium 5.8)
- [CVE-2006-3404](https://insights.sbomify.com/CVE-2006-3404/): Memory corruption in gimp:gimp (medium 5.1)
- [CVE-2006-3403](https://insights.sbomify.com/CVE-2006-3403/): Denial of service in samba:samba (medium 5.0)
- [CVE-2006-3402](https://insights.sbomify.com/CVE-2006-3402/): SQL injection in virtuastore:virtuastore (high 7.5)
- [CVE-2006-3401](https://insights.sbomify.com/CVE-2006-3401/): Memory corruption in id software:quake 3 engine (high 7.5)
- [CVE-2006-3400](https://insights.sbomify.com/CVE-2006-3400/): Memory corruption in id software:quake 3 engine (high 7.5)
- [CVE-2006-3399](https://insights.sbomify.com/CVE-2006-3399/): Cross-site scripting in moniwiki:moniwiki (low 2.6)
- [CVE-2006-3398](https://insights.sbomify.com/CVE-2006-3398/): Information disclosure in pkr internet:taskjitsu (medium 5.0)
- [CVE-2006-3397](https://insights.sbomify.com/CVE-2006-3397/): Cross-site scripting in pkr internet:taskjitsu (medium 4.3)
- [CVE-2006-3396](https://insights.sbomify.com/CVE-2006-3396/): Code injection in miro international:galleria (medium 6.8)
- [CVE-2006-3395](https://insights.sbomify.com/CVE-2006-3395/): Code injection in webdesignhq:sitebuilder-fx (medium 5.1)
- [CVE-2006-3394](https://insights.sbomify.com/CVE-2006-3394/): SQL injection in bxcp:bxcp (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/37/