# Vulnerabilities published in 2006


- [CVE-2006-3292](https://insights.sbomify.com/CVE-2006-3292/): SQL injection in jaws:jaws (high 7.5)
- [CVE-2006-3291](https://insights.sbomify.com/CVE-2006-3291/): Misconfiguration in cisco:ios (critical 9.3)
- [CVE-2006-3290](https://insights.sbomify.com/CVE-2006-3290/): Information disclosure in cisco:wireless control system (medium 5.0)
- [CVE-2006-3289](https://insights.sbomify.com/CVE-2006-3289/): Cross-site scripting in cisco:wireless control system (low 2.6)
- [CVE-2006-3288](https://insights.sbomify.com/CVE-2006-3288/): Path traversal in cisco:wireless control system (medium 5.0)
- [CVE-2006-3287](https://insights.sbomify.com/CVE-2006-3287/): Hardcoded credentials in cisco:wireless control system (high 7.5)
- [CVE-2006-3286](https://insights.sbomify.com/CVE-2006-3286/): Hardcoded credentials in cisco:wireless control system (high 7.5)
- [CVE-2006-3285](https://insights.sbomify.com/CVE-2006-3285/): Hardcoded credentials in cisco:wireless control system (high 7.5)
- [CVE-2006-3284](https://insights.sbomify.com/CVE-2006-3284/): Cross-site scripting in datetopia:dating agent pro (low 2.6)
- [CVE-2006-3283](https://insights.sbomify.com/CVE-2006-3283/): SQL injection in datetopia:dating agent pro (high 7.5)
- [CVE-2006-3282](https://insights.sbomify.com/CVE-2006-3282/): Information disclosure in datetopia:dating agent pro (medium 5.0)
- [CVE-2006-3281](https://insights.sbomify.com/CVE-2006-3281/): Code injection in microsoft:internet explorer (medium 5.1)
- [CVE-2006-3280](https://insights.sbomify.com/CVE-2006-3280/): Information disclosure in microsoft:internet explorer (high 7.5)
- [CVE-2006-3279](https://insights.sbomify.com/CVE-2006-3279/): Cross-site scripting in aewebworks:aedating (medium 4.3)
- [CVE-2006-3278](https://insights.sbomify.com/CVE-2006-3278/): Cross-site scripting in positive software:h-sphere (low 2.6)
- [CVE-2006-3277](https://insights.sbomify.com/CVE-2006-3277/): Denial of service in mailenable:mailenable enterprise (medium 5.0)
- [CVE-2006-3276](https://insights.sbomify.com/CVE-2006-3276/): Memory corruption in realnetworks:helix dna server (high 7.5)
- [CVE-2006-3275](https://insights.sbomify.com/CVE-2006-3275/): SQL injection in yabb:yabb (high 7.5)
- [CVE-2006-3274](https://insights.sbomify.com/CVE-2006-3274/): Path traversal in webmin:webmin (medium 5.0)
- [CVE-2006-3273](https://insights.sbomify.com/CVE-2006-3273/): Cross-site scripting in astrodog press:some chess (low 2.6)
- [CVE-2006-3272](https://insights.sbomify.com/CVE-2006-3272/): Cross-site request forgery in astrodog press:some chess (medium 5.0)
- [CVE-2006-3271](https://insights.sbomify.com/CVE-2006-3271/): SQL injection in softbizscripts:dating script (high 7.5)
- [CVE-2006-3270](https://insights.sbomify.com/CVE-2006-3270/): SQL injection in thorcms:thorcms (high 7.5)
- [CVE-2006-3269](https://insights.sbomify.com/CVE-2006-3269/): Code injection in thorcms:thorcms (medium 5.1)
- [CVE-2006-3268](https://insights.sbomify.com/CVE-2006-3268/): Missing authorization in novell:groupwise (medium 5.0)
- [CVE-2006-3267](https://insights.sbomify.com/CVE-2006-3267/): SQL injection in infinite core technologies:ict (high 7.5)
- [CVE-2006-3266](https://insights.sbomify.com/CVE-2006-3266/): Code injection in magnet:bee-hive lite (medium 5.1)
- [CVE-2006-3265](https://insights.sbomify.com/CVE-2006-3265/): Cross-site scripting in qdig:qdig (low 2.6)
- [CVE-2006-3264](https://insights.sbomify.com/CVE-2006-3264/): Cross-site scripting in namo:deepsearch (low 2.6)
- [CVE-2006-3263](https://insights.sbomify.com/CVE-2006-3263/): SQL injection in mambo:mambo (high 7.5)
- [CVE-2006-3262](https://insights.sbomify.com/CVE-2006-3262/): SQL injection in mambo:mambo (high 7.5)
- [CVE-2006-3261](https://insights.sbomify.com/CVE-2006-3261/): Cross-site scripting in trend micro:control manager (medium 4.3)
- [CVE-2006-3260](https://insights.sbomify.com/CVE-2006-3260/): Cross-site scripting in virtual design studios:vlbook (medium 4.3)
- [CVE-2006-3259](https://insights.sbomify.com/CVE-2006-3259/): Cross-site scripting in e107:e107 (medium 4.3)
- [CVE-2006-3258](https://insights.sbomify.com/CVE-2006-3258/): Cross-site scripting in bnbt:easytracker (low 2.6)
- [CVE-2006-3257](https://insights.sbomify.com/CVE-2006-3257/): Cross-site scripting in claroline:claroline (medium 4.3)
- [CVE-2006-3256](https://insights.sbomify.com/CVE-2006-3256/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-3255](https://insights.sbomify.com/CVE-2006-3255/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-3254](https://insights.sbomify.com/CVE-2006-3254/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-3253](https://insights.sbomify.com/CVE-2006-3253/): Cross-site scripting in jelsoft:vbulletin (low 2.6)
- [CVE-2006-3252](https://insights.sbomify.com/CVE-2006-3252/): Memory corruption in algorithmic research:privatewire gateway (high 7.5)
- [CVE-2006-3251](https://insights.sbomify.com/CVE-2006-3251/): Memory corruption in hashcash:hashcash (high 7.5)
- [CVE-2006-3250](https://insights.sbomify.com/CVE-2006-3250/): Memory corruption in microsoft:windows live messenger (medium 5.1)
- [CVE-2006-3249](https://insights.sbomify.com/CVE-2006-3249/): SQL injection in phorum:phorum (high 7.5)
- [CVE-2006-3247](https://insights.sbomify.com/CVE-2006-3247/): Cross-site scripting in gl-sh:deaf forum (low 2.6)
- [CVE-2006-3246](https://insights.sbomify.com/CVE-2006-3246/): Cross-site scripting in gl-sh:deaf forum (low 2.6)
- [CVE-2006-3245](https://insights.sbomify.com/CVE-2006-3245/): Cross-site scripting in mvnforum:mvnforum (low 2.6)
- [CVE-2006-3244](https://insights.sbomify.com/CVE-2006-3244/): SQL injection in anthill:anthill (medium 5.1)
- [CVE-2006-3243](https://insights.sbomify.com/CVE-2006-3243/): SQL injection in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2006-3242](https://insights.sbomify.com/CVE-2006-3242/): Memory corruption in mutt:mutt (high 7.5)
- [CVE-2006-3241](https://insights.sbomify.com/CVE-2006-3241/): Cross-site scripting in xennobb:xennobb (low 2.6)
- [CVE-2006-3240](https://insights.sbomify.com/CVE-2006-3240/): Cross-site scripting in dotproject:dotproject (medium 4.3)
- [CVE-2006-3239](https://insights.sbomify.com/CVE-2006-3239/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3238](https://insights.sbomify.com/CVE-2006-3238/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3237](https://insights.sbomify.com/CVE-2006-3237/): Cross-site scripting in senokian solutions:enterprise groupware systems (low 2.6)
- [CVE-2006-3236](https://insights.sbomify.com/CVE-2006-3236/): SQL injection in thinkfactory:thinkwms (high 7.5)
- [CVE-2006-3235](https://insights.sbomify.com/CVE-2006-3235/): Cross-site scripting in looknet:fineshop (low 2.6)
- [CVE-2006-3234](https://insights.sbomify.com/CVE-2006-3234/): SQL injection in looknet:fineshop (high 7.5)
- [CVE-2006-3233](https://insights.sbomify.com/CVE-2006-3233/): Cross-site scripting in open webmail:open webmail (medium 4.3)
- [CVE-2006-3232](https://insights.sbomify.com/CVE-2006-3232/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2006-3231](https://insights.sbomify.com/CVE-2006-3231/): Information disclosure in ibm:websphere application server (medium 4.3)
- [CVE-2006-3230](https://insights.sbomify.com/CVE-2006-3230/): Cross-site scripting in azureus tracker:azureus tracker (low 2.6)
- [CVE-2006-3229](https://insights.sbomify.com/CVE-2006-3229/): Cross-site scripting in open webmail:open webmail (medium 4.3)
- [CVE-2006-3228](https://insights.sbomify.com/CVE-2006-3228/): Memory corruption in nullsoft:winamp (critical 9.3)
- [CVE-2006-3227](https://insights.sbomify.com/CVE-2006-3227/): Security feature bypass in microsoft:internet explorer (low 2.6)
- [CVE-2006-3226](https://insights.sbomify.com/CVE-2006-3226/): Auth bypass in cisco:secure access control server (high 7.5)
- [CVE-2006-3225](https://insights.sbomify.com/CVE-2006-3225/): Cross-site scripting in sun:java system application server (low 2.6)
- [CVE-2006-3224](https://insights.sbomify.com/CVE-2006-3224/): Denial of service in apple:safari (medium 5.4)
- [CVE-2006-3223](https://insights.sbomify.com/CVE-2006-3223/): Memory corruption in broadcom:etrust antivirus (high 7.5)
- [CVE-2006-3222](https://insights.sbomify.com/CVE-2006-3222/): Security feature bypass in fortinet:fortios (medium 5.0)
- [CVE-2006-3221](https://insights.sbomify.com/CVE-2006-3221/): SQL injection in softnews media group:datalife engine (high 7.5)
- [CVE-2006-3220](https://insights.sbomify.com/CVE-2006-3220/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-3219](https://insights.sbomify.com/CVE-2006-3219/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-3218](https://insights.sbomify.com/CVE-2006-3218/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2006-3217](https://insights.sbomify.com/CVE-2006-3217/): Information disclosure in jaguarsoft:jaguaredit (low 2.6)
- [CVE-2006-3216](https://insights.sbomify.com/CVE-2006-3216/): Denial of service in clearswift:mailsweeper for exchange (medium 5.0)
- [CVE-2006-3215](https://insights.sbomify.com/CVE-2006-3215/): Security feature bypass in clearswift:mailsweeper for exchange (high 7.5)
- [CVE-2006-3214](https://insights.sbomify.com/CVE-2006-3214/): Denial of service in hitachi:groupmax address server (medium 5.0)
- [CVE-2006-3213](https://insights.sbomify.com/CVE-2006-3213/): SQL injection in webboa:webboa (high 7.5)
- [CVE-2006-3212](https://insights.sbomify.com/CVE-2006-3212/): Cross-site scripting in cjguestbook:cjguestbook (medium 4.3)
- [CVE-2006-3211](https://insights.sbomify.com/CVE-2006-3211/): Cross-site scripting in cjguestbook project:cjguestbook (medium 4.3)
- [CVE-2006-3210](https://insights.sbomify.com/CVE-2006-3210/): Code injection in le ralf:ralf image gallery (medium 5.1)
- [CVE-2006-3209](https://insights.sbomify.com/CVE-2006-3209/): Privilege escalation in microsoft:windows xp (high 7.2)
- [CVE-2006-3208](https://insights.sbomify.com/CVE-2006-3208/): Code injection in ultimate php board:ultimate php board (medium 6.5)
- [CVE-2006-3207](https://insights.sbomify.com/CVE-2006-3207/): Path traversal in ultimate php board:ultimate php board (medium 5.0)
- [CVE-2006-3206](https://insights.sbomify.com/CVE-2006-3206/): Business logic in ultimate php board:ultimate php board (medium 5.0)
- [CVE-2006-3205](https://insights.sbomify.com/CVE-2006-3205/): Auth bypass in ultimate php board:ultimate php board (medium 5.0)
- [CVE-2006-3204](https://insights.sbomify.com/CVE-2006-3204/): Weak cryptography in ultimate php board:ultimate php board (medium 5.0)
- [CVE-2006-3203](https://insights.sbomify.com/CVE-2006-3203/): Hardcoded credentials in ultimate php board:ultimate php board (critical 10.0)
- [CVE-2006-3202](https://insights.sbomify.com/CVE-2006-3202/): Denial of service in netbsd:netbsd (medium 4.9)
- [CVE-2006-3201](https://insights.sbomify.com/CVE-2006-3201/): Denial of service in hp:hp-ux (medium 4.9)
- [CVE-2006-3200](https://insights.sbomify.com/CVE-2006-3200/): Denial of service in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3199](https://insights.sbomify.com/CVE-2006-3199/): Memory corruption in opera:opera browser (medium 5.0)
- [CVE-2006-3198](https://insights.sbomify.com/CVE-2006-3198/): Integer overflow in opera:opera browser (high 7.5)
- [CVE-2006-3197](https://insights.sbomify.com/CVE-2006-3197/): Cross-site scripting in invision power services:invision power board (medium 4.3)
- [CVE-2006-3196](https://insights.sbomify.com/CVE-2006-3196/): Information disclosure in singapore:singapore (medium 5.0)
- [CVE-2006-3195](https://insights.sbomify.com/CVE-2006-3195/): Cross-site scripting in singapore:singapore (medium 4.3)
- [CVE-2006-3194](https://insights.sbomify.com/CVE-2006-3194/): Path traversal in singapore:singapore (medium 6.4)
- [CVE-2006-3193](https://insights.sbomify.com/CVE-2006-3193/): Code injection in grayscale:bandsite cms (medium 5.1)
- [CVE-2006-3192](https://insights.sbomify.com/CVE-2006-3192/): Code injection in php web scripts:ad manager pro (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/39/