# Vulnerabilities published in 2006


- [CVE-2006-2250](https://insights.sbomify.com/CVE-2006-2250/): Information disclosure in cutephp:cutenews (medium 6.4)
- [CVE-2006-2249](https://insights.sbomify.com/CVE-2006-2249/): Cross-site scripting in cutephp:cutenews (medium 4.3)
- [CVE-2006-2248](https://insights.sbomify.com/CVE-2006-2248/): Information disclosure in northern solutions:xeneo web server (medium 5.0)
- [CVE-2006-2247](https://insights.sbomify.com/CVE-2006-2247/): Information disclosure in webcalendar:webcalendar (medium 5.0)
- [CVE-2006-2246](https://insights.sbomify.com/CVE-2006-2246/): Cross-site scripting in uapplication:ublog (medium 5.8)
- [CVE-2006-2245](https://insights.sbomify.com/CVE-2006-2245/): Code injection in phpbb group:phpbb-auction (medium 6.8)
- [CVE-2006-2244](https://insights.sbomify.com/CVE-2006-2244/): SQL injection in web4future:news portal (medium 6.4)
- [CVE-2006-2243](https://insights.sbomify.com/CVE-2006-2243/): Cross-site scripting in web4future:news portal (medium 5.8)
- [CVE-2006-2242](https://insights.sbomify.com/CVE-2006-2242/): Denial of service in acftp:acftp (medium 5.0)
- [CVE-2006-2241](https://insights.sbomify.com/CVE-2006-2241/): Code injection in ftrainsoft:fast click (medium 6.4)
- [CVE-2006-2240](https://insights.sbomify.com/CVE-2006-2240/): Denial of service in fujitsu:netshelter fw (medium 5.0)
- [CVE-2006-2239](https://insights.sbomify.com/CVE-2006-2239/): SQL injection in tuomas airaksinen:newsadmin (high 7.5)
- [CVE-2006-2238](https://insights.sbomify.com/CVE-2006-2238/): Memory corruption in apple:quicktime (high 7.5)
- [CVE-2006-2237](https://insights.sbomify.com/CVE-2006-2237/): Command injection in awstats:awstats (medium 5.1)
- [CVE-2006-2236](https://insights.sbomify.com/CVE-2006-2236/): Memory corruption in id software:quake 3 arena (high 7.6)
- [CVE-2006-2235](https://insights.sbomify.com/CVE-2006-2235/): Auth bypass in codemunkyx:simple poll (high 7.6)
- [CVE-2006-2234](https://insights.sbomify.com/CVE-2006-2234/): Cross-site scripting in tyrocms:tyrocms (medium 6.8)
- [CVE-2006-2233](https://insights.sbomify.com/CVE-2006-2233/): Memory corruption in banktown:btcxctl20com activex control (high 7.5)
- [CVE-2006-2232](https://insights.sbomify.com/CVE-2006-2232/): Cross-site scripting in scriptsez:cute guestbook (medium 4.3)
- [CVE-2006-2231](https://insights.sbomify.com/CVE-2006-2231/): Cross-site scripting in big webmaster:big webmaster guestbook script (medium 4.3)
- [CVE-2006-2230](https://insights.sbomify.com/CVE-2006-2230/): Memory corruption in xine:xine (medium 5.0)
- [CVE-2006-2229](https://insights.sbomify.com/CVE-2006-2229/): Information disclosure in openvpn:openvpn (medium 4.0)
- [CVE-2006-2228](https://insights.sbomify.com/CVE-2006-2228/): Cross-site scripting in w-agora:w-agora (medium 4.3)
- [CVE-2006-2227](https://insights.sbomify.com/CVE-2006-2227/): Cross-site scripting in punbb:punbb (medium 4.3)
- [CVE-2006-2226](https://insights.sbomify.com/CVE-2006-2226/): Memory corruption in dxmsoft:xm easy personal ftp server (medium 5.0)
- [CVE-2006-2225](https://insights.sbomify.com/CVE-2006-2225/): Memory corruption in dxmsoft:xm easy personal ftp server (high 7.5)
- [CVE-2006-2224](https://insights.sbomify.com/CVE-2006-2224/): Auth bypass in quagga:quagga routing software suite (medium 5.0)
- [CVE-2006-2223](https://insights.sbomify.com/CVE-2006-2223/): Security feature bypass in quagga:quagga (medium 5.0)
- [CVE-2006-2222](https://insights.sbomify.com/CVE-2006-2222/): Memory corruption in norz:zawhttpd (medium 5.0)
- [CVE-2006-2221](https://insights.sbomify.com/CVE-2006-2221/): Race condition in bitrock:install builder (low 2.1)
- [CVE-2006-2220](https://insights.sbomify.com/CVE-2006-2220/): Information disclosure in phpbb:phpbb (medium 5.0)
- [CVE-2006-2219](https://insights.sbomify.com/CVE-2006-2219/): Information disclosure in phpbb group:phpbb (medium 5.0)
- [CVE-2006-2218](https://insights.sbomify.com/CVE-2006-2218/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2006-2217](https://insights.sbomify.com/CVE-2006-2217/): SQL injection in invision power services:invision power board (high 7.5)
- [CVE-2006-2216](https://insights.sbomify.com/CVE-2006-2216/): Information disclosure in devsyn:open bulletin board (medium 5.0)
- [CVE-2006-2214](https://insights.sbomify.com/CVE-2006-2214/): SQL injection in 4images:image gallery management system (high 7.5)
- [CVE-2006-2213](https://insights.sbomify.com/CVE-2006-2213/): Denial of service in hostapd:hostapd (medium 5.0)
- [CVE-2006-2212](https://insights.sbomify.com/CVE-2006-2212/): Memory corruption in karjasoft:sami ftp server (medium 6.4)
- [CVE-2006-2211](https://insights.sbomify.com/CVE-2006-2211/): Path traversal in 321soft:php-gallery (medium 5.0)
- [CVE-2006-2210](https://insights.sbomify.com/CVE-2006-2210/): Cross-site scripting in 321soft:php-gallery (medium 5.8)
- [CVE-2006-2209](https://insights.sbomify.com/CVE-2006-2209/): SQL injection in php arena:pacheckbook (medium 6.4)
- [CVE-2006-2208](https://insights.sbomify.com/CVE-2006-2208/): Cross-site scripting in planetluc:mynews (medium 4.3)
- [CVE-2006-2206](https://insights.sbomify.com/CVE-2006-2206/): Weak cryptography in ultravnc:ultravnc (critical 10.0)
- [CVE-2006-2205](https://insights.sbomify.com/CVE-2006-2205/): Denial of service in netbsd:netbsd (low 2.1)
- [CVE-2006-2204](https://insights.sbomify.com/CVE-2006-2204/): SQL injection in invision power services:invision power board (medium 5.5)
- [CVE-2006-2203](https://insights.sbomify.com/CVE-2006-2203/): Security feature bypass in kerio:kerio mailserver (medium 6.4)
- [CVE-2006-2202](https://insights.sbomify.com/CVE-2006-2202/): SQL injection in invision power services:invision gallery (medium 6.4)
- [CVE-2006-2201](https://insights.sbomify.com/CVE-2006-2201/): Security feature bypass in broadcom:resource initialization manager (medium 4.3)
- [CVE-2006-2200](https://insights.sbomify.com/CVE-2006-2200/): Memory corruption in mimms:mimms (medium 5.1)
- [CVE-2006-2199](https://insights.sbomify.com/CVE-2006-2199/): Security feature bypass in openoffice:openoffice (high 7.6)
- [CVE-2006-2198](https://insights.sbomify.com/CVE-2006-2198/): Code injection in openoffice:openoffice (high 7.6)
- [CVE-2006-2197](https://insights.sbomify.com/CVE-2006-2197/): Integer overflow in wvware:wv2 (medium 6.5)
- [CVE-2006-2196](https://insights.sbomify.com/CVE-2006-2196/): Privilege escalation in jochen friedrich:pinball (medium 4.6)
- [CVE-2006-2195](https://insights.sbomify.com/CVE-2006-2195/): Cross-site scripting in horde:horde (medium 6.8)
- [CVE-2006-2194](https://insights.sbomify.com/CVE-2006-2194/): Privilege escalation in point-to-point protocol project:point-to-point protocol (high 7.2)
- [CVE-2006-2193](https://insights.sbomify.com/CVE-2006-2193/): Memory corruption in libtiff:libtiff (high 7.5)
- [CVE-2006-2191](https://insights.sbomify.com/CVE-2006-2191/): Memory corruption in gnu:mailman (high 7.5)
- [CVE-2006-2190](https://insights.sbomify.com/CVE-2006-2190/): Cross-site scripting in open webmail:open webmail (medium 6.8)
- [CVE-2006-2189](https://insights.sbomify.com/CVE-2006-2189/): SQL injection in servous:sblog (critical 10.0)
- [CVE-2006-2188](https://insights.sbomify.com/CVE-2006-2188/): Cross-site scripting in cmscout:cmscout (medium 6.8)
- [CVE-2006-2187](https://insights.sbomify.com/CVE-2006-2187/): Cross-site scripting in zenphoto:zenphoto (medium 6.8)
- [CVE-2006-2186](https://insights.sbomify.com/CVE-2006-2186/): Information disclosure in zenphoto:zenphoto (medium 5.0)
- [CVE-2006-2185](https://insights.sbomify.com/CVE-2006-2185/): Information disclosure in novell:netware (medium 4.0)
- [CVE-2006-2184](https://insights.sbomify.com/CVE-2006-2184/): Cross-site scripting in chadha software technologies:phpkb knowledge base (medium 4.3)
- [CVE-2006-2183](https://insights.sbomify.com/CVE-2006-2183/): Privilege escalation in truecrypt foundation:truecrypt (high 7.2)
- [CVE-2006-2182](https://insights.sbomify.com/CVE-2006-2182/): Code injection in albinator:albinator (medium 6.4)
- [CVE-2006-2181](https://insights.sbomify.com/CVE-2006-2181/): Cross-site scripting in albinator:albinator (medium 4.3)
- [CVE-2006-2180](https://insights.sbomify.com/CVE-2006-2180/): Memory corruption in kmint21 software:golden ftp server (medium 6.4)
- [CVE-2006-2179](https://insights.sbomify.com/CVE-2006-2179/): SQL injection in smartwin technology:cyberoffice warehouse builder (high 7.5)
- [CVE-2006-2178](https://insights.sbomify.com/CVE-2006-2178/): Cross-site scripting in smartwin technology:cyberoffice warehouse builder (medium 5.8)
- [CVE-2006-2177](https://insights.sbomify.com/CVE-2006-2177/): Cross-site scripting in bitdamaged:geoblog (medium 4.3)
- [CVE-2006-2176](https://insights.sbomify.com/CVE-2006-2176/): Cross-site scripting in php design x:php linkliste (medium 5.8)
- [CVE-2006-2175](https://insights.sbomify.com/CVE-2006-2175/): Code injection in ftrainsoft:fast click (medium 6.4)
- [CVE-2006-2174](https://insights.sbomify.com/CVE-2006-2174/): Cross-site scripting in virtual hosting control system:virtual hosting control system (medium 4.3)
- [CVE-2006-2173](https://insights.sbomify.com/CVE-2006-2173/): Memory corruption in filezilla:filezilla server (medium 6.4)
- [CVE-2006-2172](https://insights.sbomify.com/CVE-2006-2172/): Memory corruption in gene6:g6 ftp server (high 7.5)
- [CVE-2006-2171](https://insights.sbomify.com/CVE-2006-2171/): Memory corruption in jgaa:warftpd (medium 6.4)
- [CVE-2006-2170](https://insights.sbomify.com/CVE-2006-2170/): Memory corruption in argosoft:ftp server (medium 6.4)
- [CVE-2006-2169](https://insights.sbomify.com/CVE-2006-2169/): Information disclosure in best practical solutions:request tracker (medium 5.0)
- [CVE-2006-2168](https://insights.sbomify.com/CVE-2006-2168/): Auth bypass in fileprotection express:fileprotection express (high 7.5)
- [CVE-2006-2167](https://insights.sbomify.com/CVE-2006-2167/): Cross-site scripting in sloughflash:sf-users (medium 4.3)
- [CVE-2006-2166](https://insights.sbomify.com/CVE-2006-2166/): Missing authorization in cisco:unity express (low 2.1)
- [CVE-2006-2165](https://insights.sbomify.com/CVE-2006-2165/): Cross-site scripting in pentasoft corp.:avactis shopping cart (low 2.6)
- [CVE-2006-2164](https://insights.sbomify.com/CVE-2006-2164/): SQL injection in pentasoft corp.:avactis shopping cart (high 7.5)
- [CVE-2006-2163](https://insights.sbomify.com/CVE-2006-2163/): Cross-site scripting in desert dog software:pinnacle cart (low 2.6)
- [CVE-2006-2162](https://insights.sbomify.com/CVE-2006-2162/): Memory corruption in nagios:nagios (medium 5.0)
- [CVE-2006-2161](https://insights.sbomify.com/CVE-2006-2161/): Memory corruption in cam development:cam unzip (medium 5.1)
- [CVE-2006-2160](https://insights.sbomify.com/CVE-2006-2160/): Cross-site scripting in russcom network:loginphp (medium 4.3)
- [CVE-2006-2159](https://insights.sbomify.com/CVE-2006-2159/): Other in russcom network:loginphp (medium 5.0)
- [CVE-2006-2158](https://insights.sbomify.com/CVE-2006-2158/): Code injection in stadtaus:guestbook script (medium 6.4)
- [CVE-2006-2157](https://insights.sbomify.com/CVE-2006-2157/): SQL injection in plogger:plogger (high 7.5)
- [CVE-2006-2156](https://insights.sbomify.com/CVE-2006-2156/): Path traversal in x7 group:x7 chat (medium 6.4)
- [CVE-2006-2155](https://insights.sbomify.com/CVE-2006-2155/): Misconfiguration in emc:retrospect (medium 4.6)
- [CVE-2006-2154](https://insights.sbomify.com/CVE-2006-2154/): Privilege escalation in emc:retrospect (high 7.2)
- [CVE-2006-2153](https://insights.sbomify.com/CVE-2006-2153/): Cross-site scripting in jbmc software:directadmin (medium 4.3)
- [CVE-2006-2152](https://insights.sbomify.com/CVE-2006-2152/): Code injection in phpbb group:phpbb advanced guestbook (high 7.5)
- [CVE-2006-2151](https://insights.sbomify.com/CVE-2006-2151/): Code injection in phpbb group:phpbb toplist (high 7.5)
- [CVE-2006-2150](https://insights.sbomify.com/CVE-2006-2150/): Code injection in phpbb group:phpbb toplist (medium 6.4)
- [CVE-2006-2149](https://insights.sbomify.com/CVE-2006-2149/): Code injection in avatic:aardvark topsites php (medium 6.4)
- [CVE-2006-2148](https://insights.sbomify.com/CVE-2006-2148/): Memory corruption in cgiirc:cgiirc (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/49/