# Vulnerabilities published in 2006


- [CVE-2006-2352](https://insights.sbomify.com/CVE-2006-2352/): Cross-site scripting in ipswitch:whatsup professional (medium 4.3)
- [CVE-2006-2351](https://insights.sbomify.com/CVE-2006-2351/): Cross-site scripting in ipswitch:whatsup professional (medium 4.3)
- [CVE-2006-2349](https://insights.sbomify.com/CVE-2006-2349/): File upload in oasyssoft:e-business designer (medium 6.8)
- [CVE-2006-2348](https://insights.sbomify.com/CVE-2006-2348/): Cross-site scripting in oasyssoft:e-business designer (low 2.6)
- [CVE-2006-2347](https://insights.sbomify.com/CVE-2006-2347/): Information disclosure in oasyssoft:e-business designer (medium 5.0)
- [CVE-2006-2346](https://insights.sbomify.com/CVE-2006-2346/): Auth bypass in inter7:vpopmail \(vchkpw\) (high 7.5)
- [CVE-2006-2345](https://insights.sbomify.com/CVE-2006-2345/): Cross-site scripting in roostercode ajax softwares:alipager (medium 4.3)
- [CVE-2006-2344](https://insights.sbomify.com/CVE-2006-2344/): SQL injection in ajax softwares:alipager (medium 6.4)
- [CVE-2006-2343](https://insights.sbomify.com/CVE-2006-2343/): Cross-site scripting in adventnet:manageengine opmanager (medium 5.8)
- [CVE-2006-2342](https://insights.sbomify.com/CVE-2006-2342/): Auth bypass in ibm:websphere application server (high 7.5)
- [CVE-2006-2341](https://insights.sbomify.com/CVE-2006-2341/): Information disclosure in symantec:enterprise firewall (medium 5.0)
- [CVE-2006-2340](https://insights.sbomify.com/CVE-2006-2340/): Cross-site scripting in lethal penguin:passmasterflex (medium 5.8)
- [CVE-2006-2339](https://insights.sbomify.com/CVE-2006-2339/): SQL injection in evo-dev:evotopsites (medium 6.4)
- [CVE-2006-2338](https://insights.sbomify.com/CVE-2006-2338/): Missing authorization in planet concept:planetstat (high 7.5)
- [CVE-2006-2337](https://insights.sbomify.com/CVE-2006-2337/): Path traversal in d-link:dsl-g604t (medium 5.0)
- [CVE-2006-2336](https://insights.sbomify.com/CVE-2006-2336/): SQL injection in mybulletinboard:mybulletinboard (medium 6.4)
- [CVE-2006-2335](https://insights.sbomify.com/CVE-2006-2335/): File upload in jelsoft:vbulletin (medium 6.5)
- [CVE-2006-2334](https://insights.sbomify.com/CVE-2006-2334/): Security feature bypass in microsoft:windows 2000 (low 2.1)
- [CVE-2006-2333](https://insights.sbomify.com/CVE-2006-2333/): SQL injection in mybulletinboard:mybulletinboard (medium 6.4)
- [CVE-2006-2332](https://insights.sbomify.com/CVE-2006-2332/): Denial of service in mozilla:firefox (low 2.6)
- [CVE-2006-2331](https://insights.sbomify.com/CVE-2006-2331/): Path traversal in php fusion:php fusion (medium 6.4)
- [CVE-2006-2330](https://insights.sbomify.com/CVE-2006-2330/): File upload in php fusion:php fusion (medium 6.4)
- [CVE-2006-2329](https://insights.sbomify.com/CVE-2006-2329/): Information disclosure in angelinecms:angelinecms (medium 5.0)
- [CVE-2006-2328](https://insights.sbomify.com/CVE-2006-2328/): SQL injection in angelinecms:angelinecms (medium 6.4)
- [CVE-2006-2327](https://insights.sbomify.com/CVE-2006-2327/): Integer overflow in novell:netware (medium 6.4)
- [CVE-2006-2326](https://insights.sbomify.com/CVE-2006-2326/): Path traversal in onlyscript.info:online universal payment system script (medium 5.0)
- [CVE-2006-2325](https://insights.sbomify.com/CVE-2006-2325/): Cross-site scripting in onlyscript.info:online universal payment system script (medium 6.8)
- [CVE-2006-2324](https://insights.sbomify.com/CVE-2006-2324/): Supply chain in 180solutions:zango (critical 10.0)
- [CVE-2006-2323](https://insights.sbomify.com/CVE-2006-2323/): Code injection in smartisoft:phplistpro (medium 5.1)
- [CVE-2006-2322](https://insights.sbomify.com/CVE-2006-2322/): Misconfiguration in cisco:application velocity system 3110 (medium 6.4)
- [CVE-2006-2321](https://insights.sbomify.com/CVE-2006-2321/): Cross-site scripting in ideal science:idealbb (medium 4.3)
- [CVE-2006-2320](https://insights.sbomify.com/CVE-2006-2320/): SQL injection in ideal science:idealbb (high 7.5)
- [CVE-2006-2319](https://insights.sbomify.com/CVE-2006-2319/): File upload in ideal science:idealbb (medium 5.0)
- [CVE-2006-2318](https://insights.sbomify.com/CVE-2006-2318/): File upload in ideal science:idealbb (high 7.5)
- [CVE-2006-2317](https://insights.sbomify.com/CVE-2006-2317/): Path traversal in ideal science:idealbb (medium 5.0)
- [CVE-2006-2316](https://insights.sbomify.com/CVE-2006-2316/): Misconfiguration in intel:proset wireless (medium 4.9)
- [CVE-2006-2315](https://insights.sbomify.com/CVE-2006-2315/): Code injection in ispconfig:ispconfig (high 7.5)
- [CVE-2006-2314](https://insights.sbomify.com/CVE-2006-2314/): SQL injection in postgresql:postgresql (high 7.5)
- [CVE-2006-2313](https://insights.sbomify.com/CVE-2006-2313/): SQL injection in postgresql:postgresql (high 7.5)
- [CVE-2006-2312](https://insights.sbomify.com/CVE-2006-2312/): Command injection in skype:skype (low 2.6)
- [CVE-2006-2311](https://insights.sbomify.com/CVE-2006-2311/): Cross-site scripting in new atlanta communications:bluedragon server (low 2.6)
- [CVE-2006-2310](https://insights.sbomify.com/CVE-2006-2310/): Denial of service in new atlanta communications:bluedragon server (medium 5.0)
- [CVE-2006-2309](https://insights.sbomify.com/CVE-2006-2309/): Information disclosure in etype:eserv (medium 4.0)
- [CVE-2006-2308](https://insights.sbomify.com/CVE-2006-2308/): Path traversal in etype:eserv (medium 5.5)
- [CVE-2006-2307](https://insights.sbomify.com/CVE-2006-2307/): Cross-site scripting in website baker:website baker (medium 4.3)
- [CVE-2006-2306](https://insights.sbomify.com/CVE-2006-2306/): Cross-site scripting in keyvan janghorbani:epublisherpro (critical 9.3)
- [CVE-2006-2305](https://insights.sbomify.com/CVE-2006-2305/): Cross-site scripting in jadu limited:jadu cms (medium 5.8)
- [CVE-2006-2304](https://insights.sbomify.com/CVE-2006-2304/): Integer overflow in novell:client (critical 10.0)
- [CVE-2006-2303](https://insights.sbomify.com/CVE-2006-2303/): Cross-site scripting in mirabilis:icq (medium 6.4)
- [CVE-2006-2302](https://insights.sbomify.com/CVE-2006-2302/): SQL injection in duware:dugallery (high 7.5)
- [CVE-2006-2301](https://insights.sbomify.com/CVE-2006-2301/): SQL injection in ozzywork:galeri (high 7.5)
- [CVE-2006-2300](https://insights.sbomify.com/CVE-2006-2300/): SQL injection in keyvan1:eimagepro (high 7.5)
- [CVE-2006-2298](https://insights.sbomify.com/CVE-2006-2298/): Denial of service in internet key exchange:internet key exchange (medium 5.0)
- [CVE-2006-2297](https://insights.sbomify.com/CVE-2006-2297/): Memory corruption in microsoft:infotech storage system library (medium 4.0)
- [CVE-2006-2296](https://insights.sbomify.com/CVE-2006-2296/): SQL injection in keyvan1.com:edirectorypro (medium 6.4)
- [CVE-2006-2295](https://insights.sbomify.com/CVE-2006-2295/): Path traversal in timobraun:dynamic galerie (high 7.5)
- [CVE-2006-2294](https://insights.sbomify.com/CVE-2006-2294/): Cross-site scripting in timobraun:dynamic galerie (medium 6.8)
- [CVE-2006-2293](https://insights.sbomify.com/CVE-2006-2293/): SQL injection in expinion.net:multicalendars (medium 6.4)
- [CVE-2006-2292](https://insights.sbomify.com/CVE-2006-2292/): SQL injection in inhouse associates:ia-calendar (medium 6.4)
- [CVE-2006-2291](https://insights.sbomify.com/CVE-2006-2291/): Cross-site scripting in inhouse associates:ia-calendar (medium 5.8)
- [CVE-2006-2290](https://insights.sbomify.com/CVE-2006-2290/): Cross-site scripting in www.goel.ch:2005-comments-script (medium 6.8)
- [CVE-2006-2289](https://insights.sbomify.com/CVE-2006-2289/): Memory corruption in avahi:avahi (low 2.1)
- [CVE-2006-2288](https://insights.sbomify.com/CVE-2006-2288/): Denial of service in avahi:avahi (low 3.6)
- [CVE-2006-2287](https://insights.sbomify.com/CVE-2006-2287/): Cross-site scripting in vision source:vision source cms (medium 5.8)
- [CVE-2006-2286](https://insights.sbomify.com/CVE-2006-2286/): Code injection in dokeos:dokeos (medium 6.8)
- [CVE-2006-2285](https://insights.sbomify.com/CVE-2006-2285/): Code injection in dokeos:open source learning and knowledge management tool (medium 5.1)
- [CVE-2006-2284](https://insights.sbomify.com/CVE-2006-2284/): Code injection in claroline:claroline (medium 6.8)
- [CVE-2006-2283](https://insights.sbomify.com/CVE-2006-2283/): Code injection in spiffyjr:phpraid (high 7.5)
- [CVE-2006-2282](https://insights.sbomify.com/CVE-2006-2282/): Cross-site scripting in x7 group:x7 chat (medium 4.3)
- [CVE-2006-2281](https://insights.sbomify.com/CVE-2006-2281/): File upload in x-scripts:x-poll (high 7.5)
- [CVE-2006-2280](https://insights.sbomify.com/CVE-2006-2280/): Path traversal in openengine:openengine (medium 5.0)
- [CVE-2006-2279](https://insights.sbomify.com/CVE-2006-2279/): SQL injection in arabless:saphplesson (high 7.5)
- [CVE-2006-2278](https://insights.sbomify.com/CVE-2006-2278/): Information disclosure in arabless:saphplesson (medium 5.0)
- [CVE-2006-2277](https://insights.sbomify.com/CVE-2006-2277/): Denial of service in apple:mac os x (medium 5.0)
- [CVE-2006-2276](https://insights.sbomify.com/CVE-2006-2276/): Denial of service in quagga:quagga (medium 4.9)
- [CVE-2006-2275](https://insights.sbomify.com/CVE-2006-2275/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2006-2274](https://insights.sbomify.com/CVE-2006-2274/): Denial of service in lksctp:stream control transmission protocol (medium 5.0)
- [CVE-2006-2273](https://insights.sbomify.com/CVE-2006-2273/): Security feature bypass in verisign:i-nav (critical 9.3)
- [CVE-2006-2272](https://insights.sbomify.com/CVE-2006-2272/): Denial of service in lksctp:stream control transmission protocol (high 7.8)
- [CVE-2006-2271](https://insights.sbomify.com/CVE-2006-2271/): Denial of service in lksctp:lksctp (high 7.8)
- [CVE-2006-2270](https://insights.sbomify.com/CVE-2006-2270/): Code injection in jetbox:jetbox cms (high 7.5)
- [CVE-2006-2269](https://insights.sbomify.com/CVE-2006-2269/): Cross-site scripting in mywebland:mybloggie (medium 4.3)
- [CVE-2006-2268](https://insights.sbomify.com/CVE-2006-2268/): SQL injection in flexcustomer:flexcustomer (high 7.5)
- [CVE-2006-2267](https://insights.sbomify.com/CVE-2006-2267/): Denial of service in kerio:winroute firewall (medium 5.0)
- [CVE-2006-2266](https://insights.sbomify.com/CVE-2006-2266/): SQL injection in chirpy:chirpy (high 7.5)
- [CVE-2006-2265](https://insights.sbomify.com/CVE-2006-2265/): Cross-site scripting in ocean12 technologies:calendar manager pro (low 2.6)
- [CVE-2006-2264](https://insights.sbomify.com/CVE-2006-2264/): SQL injection in ocean12 technologies:calendar manager pro (medium 6.5)
- [CVE-2006-2263](https://insights.sbomify.com/CVE-2006-2263/): SQL injection in virtual programming:vp-asp (high 7.5)
- [CVE-2006-2262](https://insights.sbomify.com/CVE-2006-2262/): Cross-site scripting in singapore:singapore (low 2.6)
- [CVE-2006-2261](https://insights.sbomify.com/CVE-2006-2261/): Code injection in acal:acal (high 7.5)
- [CVE-2006-2260](https://insights.sbomify.com/CVE-2006-2260/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2006-2259](https://insights.sbomify.com/CVE-2006-2259/): SQL injection in maxxcode:maxxschedule (high 7.5)
- [CVE-2006-2258](https://insights.sbomify.com/CVE-2006-2258/): Cross-site scripting in maxxcode:maxxschedule (low 2.6)
- [CVE-2006-2257](https://insights.sbomify.com/CVE-2006-2257/): Cross-site scripting in faktorystudios:easyevent (medium 5.8)
- [CVE-2006-2256](https://insights.sbomify.com/CVE-2006-2256/): Code injection in eqdkp:eqdkp (medium 6.4)
- [CVE-2006-2255](https://insights.sbomify.com/CVE-2006-2255/): SQL injection in creative software:community portal (high 7.5)
- [CVE-2006-2254](https://insights.sbomify.com/CVE-2006-2254/): Memory corruption in intervations:filecopa (medium 5.0)
- [CVE-2006-2253](https://insights.sbomify.com/CVE-2006-2253/): Code injection in otterware:statit (high 7.5)
- [CVE-2006-2252](https://insights.sbomify.com/CVE-2006-2252/): Cross-site scripting in openfaq:openfaq (medium 6.4)
- [CVE-2006-2251](https://insights.sbomify.com/CVE-2006-2251/): SQL injection in invision power services:invision community blog (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/48/