# Vulnerabilities published in 2006


- [CVE-2006-1439](https://insights.sbomify.com/CVE-2006-1439/): Information disclosure in apple:mac os x (low 2.1)
- [CVE-2006-1438](https://insights.sbomify.com/CVE-2006-1438/): Cross-site scripting in andy grayndler:andys php knowledgebase (medium 6.8)
- [CVE-2006-1437](https://insights.sbomify.com/CVE-2006-1437/): Information disclosure in upoint:at1 event publisher (medium 5.0)
- [CVE-2006-1436](https://insights.sbomify.com/CVE-2006-1436/): Cross-site scripting in upoint:at1 event publisher (medium 4.3)
- [CVE-2006-1435](https://insights.sbomify.com/CVE-2006-1435/): Cross-site scripting in accounting receiving and inventory administration:aria (medium 6.8)
- [CVE-2006-1434](https://insights.sbomify.com/CVE-2006-1434/): Cross-site scripting in annuaire:directory (medium 6.8)
- [CVE-2006-1433](https://insights.sbomify.com/CVE-2006-1433/): Information disclosure in annuaire:directory (medium 5.0)
- [CVE-2006-1432](https://insights.sbomify.com/CVE-2006-1432/): Information disclosure in fusionzone:couponzone (medium 5.0)
- [CVE-2006-1431](https://insights.sbomify.com/CVE-2006-1431/): Cross-site scripting in fusionzone:couponzone (medium 4.3)
- [CVE-2006-1430](https://insights.sbomify.com/CVE-2006-1430/): Cross-site scripting in controlzx:hms (medium 4.3)
- [CVE-2006-1429](https://insights.sbomify.com/CVE-2006-1429/): Cross-site scripting in fusionzone:classifiedzone (medium 4.3)
- [CVE-2006-1428](https://insights.sbomify.com/CVE-2006-1428/): Cross-site scripting in coinsoft technologies:phpcoin (medium 4.3)
- [CVE-2006-1427](https://insights.sbomify.com/CVE-2006-1427/): Cross-site scripting in web-app.org:webapp (medium 4.3)
- [CVE-2006-1426](https://insights.sbomify.com/CVE-2006-1426/): SQL injection in pixel motion:pixel motion blog (high 7.5)
- [CVE-2006-1425](https://insights.sbomify.com/CVE-2006-1425/): Cross-site scripting in phpmyfamily:phpmyfamily (medium 4.3)
- [CVE-2006-1423](https://insights.sbomify.com/CVE-2006-1423/): SQL injection in ubbcentral:ubb.threads (medium 5.0)
- [CVE-2006-1422](https://insights.sbomify.com/CVE-2006-1422/): SQL injection in jjwwebdesign:phpbookingcalendar (medium 5.0)
- [CVE-2006-1421](https://insights.sbomify.com/CVE-2006-1421/): SQL injection in arthur konze webdesign:akocomment (medium 5.1)
- [CVE-2006-1420](https://insights.sbomify.com/CVE-2006-1420/): SQL injection in arabless:saphplesson (medium 5.0)
- [CVE-2006-1419](https://insights.sbomify.com/CVE-2006-1419/): SQL injection in nuked-klan:nuked-klan (medium 5.0)
- [CVE-2006-1418](https://insights.sbomify.com/CVE-2006-1418/): Cross-site scripting in caloris planitia technologies:e-school management system (low 2.6)
- [CVE-2006-1417](https://insights.sbomify.com/CVE-2006-1417/): Cross-site scripting in caloris planitia technologies:web quiz pro (medium 4.3)
- [CVE-2006-1416](https://insights.sbomify.com/CVE-2006-1416/): Cross-site scripting in xigla:absolute faq manager .net (medium 4.3)
- [CVE-2006-1415](https://insights.sbomify.com/CVE-2006-1415/): Cross-site scripting in dotnetbb:dotnetbb forums (medium 4.3)
- [CVE-2006-1414](https://insights.sbomify.com/CVE-2006-1414/): Cross-site scripting in toast forums:toast forums (medium 4.3)
- [CVE-2006-1413](https://insights.sbomify.com/CVE-2006-1413/): Cross-site scripting in htmljunction:ezhomepagepro (medium 4.3)
- [CVE-2006-1412](https://insights.sbomify.com/CVE-2006-1412/): Information disclosure in tft gallery:tft gallery (medium 5.0)
- [CVE-2006-1411](https://insights.sbomify.com/CVE-2006-1411/): Cross-site scripting in xigla:absolute image gallery xe (medium 4.3)
- [CVE-2006-1410](https://insights.sbomify.com/CVE-2006-1410/): Cross-site scripting in xigla:absolute live support xe (medium 4.3)
- [CVE-2006-1409](https://insights.sbomify.com/CVE-2006-1409/): Memory corruption in vavoom:vavoom (medium 5.0)
- [CVE-2006-1408](https://insights.sbomify.com/CVE-2006-1408/): Denial of service in vavoom:vavoom (medium 5.0)
- [CVE-2006-1407](https://insights.sbomify.com/CVE-2006-1407/): Cross-site scripting in webhost automation:helm web hosting control panel (medium 5.8)
- [CVE-2006-1406](https://insights.sbomify.com/CVE-2006-1406/): Cross-site scripting in uniforum:uniforum (medium 4.3)
- [CVE-2006-1405](https://insights.sbomify.com/CVE-2006-1405/): Cross-site scripting in sheer vision technologies:sscms (medium 5.8)
- [CVE-2006-1404](https://insights.sbomify.com/CVE-2006-1404/): Cross-site scripting in industrial imagination:blankol (medium 5.8)
- [CVE-2006-1403](https://insights.sbomify.com/CVE-2006-1403/): Memory corruption in csdoom:csdoom 2005 (high 7.8)
- [CVE-2006-1402](https://insights.sbomify.com/CVE-2006-1402/): Memory corruption in csdoom:csdoom (high 7.5)
- [CVE-2006-1401](https://insights.sbomify.com/CVE-2006-1401/): Cross-site scripting in php lite:calendar express (medium 4.3)
- [CVE-2006-1400](https://insights.sbomify.com/CVE-2006-1400/): Cross-site scripting in metisware:instructor (medium 4.3)
- [CVE-2006-1399](https://insights.sbomify.com/CVE-2006-1399/): Cross-site scripting in php lite:meeting reserve (medium 4.3)
- [CVE-2006-1398](https://insights.sbomify.com/CVE-2006-1398/): Cross-site scripting in sixal:g-book (medium 4.3)
- [CVE-2006-1397](https://insights.sbomify.com/CVE-2006-1397/): Cross-site scripting in phpadsnew:phpadsnew (medium 4.3)
- [CVE-2006-1396](https://insights.sbomify.com/CVE-2006-1396/): Cross-site scripting in cholod:mysql based message board (medium 4.3)
- [CVE-2006-1395](https://insights.sbomify.com/CVE-2006-1395/): SQL injection in cholod:mysql based message board (high 7.5)
- [CVE-2006-1394](https://insights.sbomify.com/CVE-2006-1394/): Cross-site scripting in university of washington:pubcookie (medium 4.3)
- [CVE-2006-1393](https://insights.sbomify.com/CVE-2006-1393/): Cross-site scripting in university of washington:pubcookie (medium 4.3)
- [CVE-2006-1392](https://insights.sbomify.com/CVE-2006-1392/): Cross-site scripting in university of washington:pubcookie (medium 4.3)
- [CVE-2006-1391](https://insights.sbomify.com/CVE-2006-1391/): Information disclosure in pablo software solutions:baby asp web server (medium 5.0)
- [CVE-2006-1390](https://insights.sbomify.com/CVE-2006-1390/): Memory corruption in gentoo:linux (medium 4.6)
- [CVE-2006-1389](https://insights.sbomify.com/CVE-2006-1389/): Denial of service in hp:hp-ux (high 7.8)
- [CVE-2006-1388](https://insights.sbomify.com/CVE-2006-1388/): Other in microsoft:ie (high 7.5)
- [CVE-2006-1387](https://insights.sbomify.com/CVE-2006-1387/): Denial of service in twiki:twiki (medium 4.0)
- [CVE-2006-1386](https://insights.sbomify.com/CVE-2006-1386/): Missing authorization in twiki:twiki (high 7.5)
- [CVE-2006-1385](https://insights.sbomify.com/CVE-2006-1385/): Memory corruption in kismac:kismac (medium 5.1)
- [CVE-2006-1384](https://insights.sbomify.com/CVE-2006-1384/): Cross-site scripting in ibm:tivoli business systems manager (medium 4.3)
- [CVE-2006-1383](https://insights.sbomify.com/CVE-2006-1383/): Path traversal in pablo software solutions:baby ftp server (medium 4.0)
- [CVE-2006-1382](https://insights.sbomify.com/CVE-2006-1382/): Code injection in jelsoft:impex (high 7.5)
- [CVE-2006-1381](https://insights.sbomify.com/CVE-2006-1381/): Misconfiguration in trend micro:officescan (critical 10.0)
- [CVE-2006-1380](https://insights.sbomify.com/CVE-2006-1380/): Misconfiguration in trendmicro:interscan messaging security suite (high 7.2)
- [CVE-2006-1379](https://insights.sbomify.com/CVE-2006-1379/): Misconfiguration in trend micro:pc-cillin 2006 (high 7.2)
- [CVE-2006-1378](https://insights.sbomify.com/CVE-2006-1378/): Weak cryptography in counterpane:password safe (medium 4.9)
- [CVE-2006-1377](https://insights.sbomify.com/CVE-2006-1377/): Cross-site scripting in comoblog project:comoblog (medium 4.3)
- [CVE-2006-1376](https://insights.sbomify.com/CVE-2006-1376/): Misconfiguration in debian:debian linux (low 2.1)
- [CVE-2006-1375](https://insights.sbomify.com/CVE-2006-1375/): Information disclosure in brain book software:adman (medium 5.0)
- [CVE-2006-1374](https://insights.sbomify.com/CVE-2006-1374/): SQL injection in brain book software:adman (high 7.5)
- [CVE-2006-1373](https://insights.sbomify.com/CVE-2006-1373/): Cross-site scripting in php live:php live (medium 4.3)
- [CVE-2006-1372](https://insights.sbomify.com/CVE-2006-1372/): SQL injection in benson it solutions:1webcalendar (medium 5.0)
- [CVE-2006-1371](https://insights.sbomify.com/CVE-2006-1371/): File upload in xhp:cms (critical 9.0)
- [CVE-2006-1370](https://insights.sbomify.com/CVE-2006-1370/): Memory corruption in realnetworks:realone player (critical 9.3)
- [CVE-2006-1369](https://insights.sbomify.com/CVE-2006-1369/): Cross-site scripting in invision power services:invision power board (medium 6.8)
- [CVE-2006-1368](https://insights.sbomify.com/CVE-2006-1368/): Memory corruption in linux:linux kernel (critical 10.0)
- [CVE-2006-1367](https://insights.sbomify.com/CVE-2006-1367/): Auth bypass in motorola:pebl u6 (medium 6.8)
- [CVE-2006-1366](https://insights.sbomify.com/CVE-2006-1366/): Memory corruption in motorola:pebl u6 (high 7.8)
- [CVE-2006-1365](https://insights.sbomify.com/CVE-2006-1365/): Auth bypass in motorola:e398 (medium 5.0)
- [CVE-2006-1364](https://insights.sbomify.com/CVE-2006-1364/): Denial of service in microsoft:asp.net (high 7.5)
- [CVE-2006-1363](https://insights.sbomify.com/CVE-2006-1363/): File upload in justin white:freewps (high 7.5)
- [CVE-2006-1362](https://insights.sbomify.com/CVE-2006-1362/): SQL injection in mini-nuke:mini-nuke cms (high 7.5)
- [CVE-2006-1361](https://insights.sbomify.com/CVE-2006-1361/): Cross-site scripting in oswiki:oswiki (medium 4.3)
- [CVE-2006-1360](https://insights.sbomify.com/CVE-2006-1360/): SQL injection in musicbox:musicbox (high 7.5)
- [CVE-2006-1359](https://insights.sbomify.com/CVE-2006-1359/): Memory corruption in microsoft:ie (critical 9.3)
- [CVE-2006-1358](https://insights.sbomify.com/CVE-2006-1358/): Information disclosure in oracle:weblogic portal (medium 5.0)
- [CVE-2006-1357](https://insights.sbomify.com/CVE-2006-1357/): Cross-site scripting in f5:firepass 4100 (medium 4.3)
- [CVE-2006-1356](https://insights.sbomify.com/CVE-2006-1356/): Memory corruption in andrew hsu:libvc (medium 5.1)
- [CVE-2006-1355](https://insights.sbomify.com/CVE-2006-1355/): Misconfiguration in alwil:avast antivirus (high 7.2)
- [CVE-2006-1354](https://insights.sbomify.com/CVE-2006-1354/): Auth bypass in freeradius:freeradius (high 7.5)
- [CVE-2006-1353](https://insights.sbomify.com/CVE-2006-1353/): SQL injection in aspportal:aspportal (high 7.5)
- [CVE-2006-1352](https://insights.sbomify.com/CVE-2006-1352/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2006-1351](https://insights.sbomify.com/CVE-2006-1351/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2006-1350](https://insights.sbomify.com/CVE-2006-1350/): Code injection in articlesone:99articles directory (high 7.5)
- [CVE-2006-1349](https://insights.sbomify.com/CVE-2006-1349/): Cross-site scripting in musicbox:musicbox (medium 4.3)
- [CVE-2006-1348](https://insights.sbomify.com/CVE-2006-1348/): Cross-site scripting in greg neustaetter:gcards (medium 4.3)
- [CVE-2006-1347](https://insights.sbomify.com/CVE-2006-1347/): SQL injection in greg neustaetter:gcards (high 7.5)
- [CVE-2006-1346](https://insights.sbomify.com/CVE-2006-1346/): Path traversal in greg neustaetter:gcards (medium 6.4)
- [CVE-2006-1345](https://insights.sbomify.com/CVE-2006-1345/): Information disclosure in mybulletinboard:mybulletinboard (medium 5.0)
- [CVE-2006-1344](https://insights.sbomify.com/CVE-2006-1344/): Cross-site scripting in verisign:mpki (medium 4.3)
- [CVE-2006-1343](https://insights.sbomify.com/CVE-2006-1343/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2006-1342](https://insights.sbomify.com/CVE-2006-1342/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2006-1341](https://insights.sbomify.com/CVE-2006-1341/): SQL injection in maian events:maian events (high 7.5)
- [CVE-2006-1340](https://insights.sbomify.com/CVE-2006-1340/): Information disclosure in cutephp:cutenews (medium 5.0)
- [CVE-2006-1339](https://insights.sbomify.com/CVE-2006-1339/): Path traversal in cutephp:cutenews (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/57/