# Vulnerabilities published in 2006


- [CVE-2006-1338](https://insights.sbomify.com/CVE-2006-1338/): Denial of service in mailenable:mailenable enterprise (medium 5.0)
- [CVE-2006-1337](https://insights.sbomify.com/CVE-2006-1337/): Memory corruption in mailenable:mailenable (high 7.5)
- [CVE-2006-1336](https://insights.sbomify.com/CVE-2006-1336/): Cross-site scripting in extcalendar:extcalendar (medium 5.0)
- [CVE-2006-1335](https://insights.sbomify.com/CVE-2006-1335/): Security feature bypass in gnome:screensaver (low 3.7)
- [CVE-2006-1334](https://insights.sbomify.com/CVE-2006-1334/): SQL injection in maian script world:maian weblog (medium 6.4)
- [CVE-2006-1333](https://insights.sbomify.com/CVE-2006-1333/): SQL injection in betaparticle:betaparticle blog (medium 6.4)
- [CVE-2006-1332](https://insights.sbomify.com/CVE-2006-1332/): Information disclosure in phpoutsourcing:noahs classifieds (medium 6.4)
- [CVE-2006-1331](https://insights.sbomify.com/CVE-2006-1331/): Cross-site scripting in phpoutsourcing:noahs classifieds (medium 6.8)
- [CVE-2006-1330](https://insights.sbomify.com/CVE-2006-1330/): SQL injection in phpwebsite:phpwebsite (high 7.5)
- [CVE-2006-1329](https://insights.sbomify.com/CVE-2006-1329/): Denial of service in jabberstudio:jabberd (medium 5.0)
- [CVE-2006-1328](https://insights.sbomify.com/CVE-2006-1328/): SQL injection in skull-splitter:download counter wallpaper (medium 5.0)
- [CVE-2006-1327](https://insights.sbomify.com/CVE-2006-1327/): SQL injection in softbb:softbb (high 7.5)
- [CVE-2006-1326](https://insights.sbomify.com/CVE-2006-1326/): Cross-site scripting in invision power services:invision power board (medium 4.3)
- [CVE-2006-1325](https://insights.sbomify.com/CVE-2006-1325/): Cross-site scripting in streber:streber (medium 6.8)
- [CVE-2006-1324](https://insights.sbomify.com/CVE-2006-1324/): Cross-site scripting in woltlab:burning board (medium 6.8)
- [CVE-2006-1323](https://insights.sbomify.com/CVE-2006-1323/): Path traversal in webtoolmaster software:winhki (medium 5.1)
- [CVE-2006-1322](https://insights.sbomify.com/CVE-2006-1322/): Memory corruption in novell:netware (medium 5.0)
- [CVE-2006-1321](https://insights.sbomify.com/CVE-2006-1321/): Cross-site scripting in webcheck:webcheck (medium 4.3)
- [CVE-2006-1320](https://insights.sbomify.com/CVE-2006-1320/): Security feature bypass in rssh:rssh (high 7.5)
- [CVE-2006-1319](https://insights.sbomify.com/CVE-2006-1319/): Privilege escalation in runit:runit (medium 6.2)
- [CVE-2006-1318](https://insights.sbomify.com/CVE-2006-1318/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-1316](https://insights.sbomify.com/CVE-2006-1316/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-1315](https://insights.sbomify.com/CVE-2006-1315/): Information disclosure in microsoft:server service (medium 5.0)
- [CVE-2006-1314](https://insights.sbomify.com/CVE-2006-1314/): Memory corruption in microsoft:windows 2000 (high 7.5)
- [CVE-2006-1313](https://insights.sbomify.com/CVE-2006-1313/): Memory corruption in microsoft:windows 2000 (medium 6.8)
- [CVE-2006-1311](https://insights.sbomify.com/CVE-2006-1311/): Memory corruption in microsoft:learning essentials (critical 9.3)
- [CVE-2006-1309](https://insights.sbomify.com/CVE-2006-1309/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-1308](https://insights.sbomify.com/CVE-2006-1308/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-1306](https://insights.sbomify.com/CVE-2006-1306/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-1305](https://insights.sbomify.com/CVE-2006-1305/): Denial of service in microsoft:office (medium 4.3)
- [CVE-2006-1304](https://insights.sbomify.com/CVE-2006-1304/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-1303](https://insights.sbomify.com/CVE-2006-1303/): Memory corruption in microsoft:ie (critical 9.3)
- [CVE-2006-1302](https://insights.sbomify.com/CVE-2006-1302/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-1301](https://insights.sbomify.com/CVE-2006-1301/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-1300](https://insights.sbomify.com/CVE-2006-1300/): Security feature bypass in microsoft:.net framework (medium 5.0)
- [CVE-2006-1298](https://insights.sbomify.com/CVE-2006-1298/): Memory corruption in symantec veritas:backup exec (medium 4.6)
- [CVE-2006-1297](https://insights.sbomify.com/CVE-2006-1297/): Memory corruption in symantec veritas:backup exec (medium 5.0)
- [CVE-2006-1296](https://insights.sbomify.com/CVE-2006-1296/): Privilege escalation in beagle-project:beagle (high 7.5)
- [CVE-2006-1295](https://insights.sbomify.com/CVE-2006-1295/): Cross-site scripting in spip:spip (medium 4.3)
- [CVE-2006-1294](https://insights.sbomify.com/CVE-2006-1294/): Code injection in knowledgebasepublisher:knowledgebasepublisher (high 7.5)
- [CVE-2006-1293](https://insights.sbomify.com/CVE-2006-1293/): Cross-site scripting in astalavista it engineering:contrexx (medium 4.3)
- [CVE-2006-1292](https://insights.sbomify.com/CVE-2006-1292/): Path traversal in php icalendar:php icalendar (medium 5.0)
- [CVE-2006-1291](https://insights.sbomify.com/CVE-2006-1291/): File upload in php icalendar:php icalendar (high 7.5)
- [CVE-2006-1290](https://insights.sbomify.com/CVE-2006-1290/): Cross-site scripting in milkeyway:milkeyway captive portal (medium 4.3)
- [CVE-2006-1289](https://insights.sbomify.com/CVE-2006-1289/): SQL injection in milkeyway:milkeyway captive portal (high 7.5)
- [CVE-2006-1288](https://insights.sbomify.com/CVE-2006-1288/): SQL injection in invision power services:invision power board (high 7.5)
- [CVE-2006-1287](https://insights.sbomify.com/CVE-2006-1287/): Cross-site scripting in invision power services:invision power board (medium 5.8)
- [CVE-2006-1286](https://insights.sbomify.com/CVE-2006-1286/): Memory corruption in symantec:ghost solutions suite (low 2.1)
- [CVE-2006-1285](https://insights.sbomify.com/CVE-2006-1285/): Misconfiguration in symantec:ghost solutions suite (low 3.2)
- [CVE-2006-1284](https://insights.sbomify.com/CVE-2006-1284/): Hardcoded credentials in symantec:ghost solutions suite (medium 4.6)
- [CVE-2006-1283](https://insights.sbomify.com/CVE-2006-1283/): Privilege escalation in freebsd:freebsd (high 7.2)
- [CVE-2006-1282](https://insights.sbomify.com/CVE-2006-1282/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-1281](https://insights.sbomify.com/CVE-2006-1281/): Cross-site scripting in mybulletinboard:mybulletinboard (low 3.5)
- [CVE-2006-1280](https://insights.sbomify.com/CVE-2006-1280/): Information disclosure in sherzod ruzmetov:cgi session (high 7.5)
- [CVE-2006-1279](https://insights.sbomify.com/CVE-2006-1279/): Race condition in sherzod ruzmetov:cgi session (medium 5.0)
- [CVE-2006-1278](https://insights.sbomify.com/CVE-2006-1278/): SQL injection in upoint:\@1 file store (medium 6.8)
- [CVE-2006-1277](https://insights.sbomify.com/CVE-2006-1277/): Cross-site scripting in upoint:at1 file store (medium 5.8)
- [CVE-2006-1276](https://insights.sbomify.com/CVE-2006-1276/): Auth bypass in himpfen consulting:php simplenews (critical 10.0)
- [CVE-2006-1275](https://insights.sbomify.com/CVE-2006-1275/): Denial of service in ggz gaming zone:ggz gaming zone (medium 5.0)
- [CVE-2006-1274](https://insights.sbomify.com/CVE-2006-1274/): Privilege escalation in avira:antivir personal (high 7.2)
- [CVE-2006-1273](https://insights.sbomify.com/CVE-2006-1273/): Denial of service in mozilla:firefox (high 7.8)
- [CVE-2006-1272](https://insights.sbomify.com/CVE-2006-1272/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-1271](https://insights.sbomify.com/CVE-2006-1271/): SQL injection in oxynews:oxynews (high 7.5)
- [CVE-2006-1270](https://insights.sbomify.com/CVE-2006-1270/): Cross-site scripting in inprotect:inprotect (low 3.5)
- [CVE-2006-1269](https://insights.sbomify.com/CVE-2006-1269/): Memory corruption in rahul dhesi:zoo (medium 6.2)
- [CVE-2006-1268](https://insights.sbomify.com/CVE-2006-1268/): Memory corruption in funkwerk:x2300 (high 7.8)
- [CVE-2006-1267](https://insights.sbomify.com/CVE-2006-1267/): Auth bypass in invision power services:invision power board (medium 5.1)
- [CVE-2006-1266](https://insights.sbomify.com/CVE-2006-1266/): Cross-site scripting in virtual communication services:vpmi enterprise (medium 4.3)
- [CVE-2006-1265](https://insights.sbomify.com/CVE-2006-1265/): SQL injection in xhawk.net:discussion (high 7.5)
- [CVE-2006-1264](https://insights.sbomify.com/CVE-2006-1264/): Cross-site scripting in xhawk.net:discussion (medium 4.3)
- [CVE-2006-1263](https://insights.sbomify.com/CVE-2006-1263/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2006-1262](https://insights.sbomify.com/CVE-2006-1262/): SQL injection in aspportal:aspportal (high 7.5)
- [CVE-2006-1261](https://insights.sbomify.com/CVE-2006-1261/): Cross-site scripting in aspportal:aspportal (medium 4.3)
- [CVE-2006-1260](https://insights.sbomify.com/CVE-2006-1260/): Path traversal in horde:horde (medium 5.0)
- [CVE-2006-1259](https://insights.sbomify.com/CVE-2006-1259/): SQL injection in maian:support (high 7.5)
- [CVE-2006-1258](https://insights.sbomify.com/CVE-2006-1258/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2006-1257](https://insights.sbomify.com/CVE-2006-1257/): Auth bypass in microsoft:commerce server (high 7.5)
- [CVE-2006-1256](https://insights.sbomify.com/CVE-2006-1256/): Cross-site scripting in skullsplitter:php guestbook (low 2.6)
- [CVE-2006-1255](https://insights.sbomify.com/CVE-2006-1255/): Memory corruption in mercur:mercur messaging (critical 10.0)
- [CVE-2006-1254](https://insights.sbomify.com/CVE-2006-1254/): Other in borderware:mxtreme (critical 10.0)
- [CVE-2006-1253](https://insights.sbomify.com/CVE-2006-1253/): Security feature bypass in glftpd:glftpd (high 7.5)
- [CVE-2006-1252](https://insights.sbomify.com/CVE-2006-1252/): Code injection in light weight calendar:light weight calendar (high 7.5)
- [CVE-2006-1251](https://insights.sbomify.com/CVE-2006-1251/): Command injection in sa-exim:sa-exim (medium 5.0)
- [CVE-2006-1250](https://insights.sbomify.com/CVE-2006-1250/): Other in amax information technologies:winmail (critical 10.0)
- [CVE-2006-1249](https://insights.sbomify.com/CVE-2006-1249/): Integer overflow in apple:itunes (medium 6.8)
- [CVE-2006-1248](https://insights.sbomify.com/CVE-2006-1248/): Misconfiguration in hp:hp-ux (medium 4.6)
- [CVE-2006-1247](https://insights.sbomify.com/CVE-2006-1247/): Race condition in ibm:aix (low 3.3)
- [CVE-2006-1246](https://insights.sbomify.com/CVE-2006-1246/): Privilege escalation in ibm:aix (high 7.2)
- [CVE-2006-1245](https://insights.sbomify.com/CVE-2006-1245/): Memory corruption in microsoft:ie (high 7.5)
- [CVE-2006-1244](https://insights.sbomify.com/CVE-2006-1244/): Other in debian:debian linux (high 7.6)
- [CVE-2006-1243](https://insights.sbomify.com/CVE-2006-1243/): Path traversal in alexander palmo:simple php blog (high 7.5)
- [CVE-2006-1242](https://insights.sbomify.com/CVE-2006-1242/): Security feature bypass in linux:linux kernel (medium 5.0)
- [CVE-2006-1241](https://insights.sbomify.com/CVE-2006-1241/): Misconfiguration in firebirdsql:firebird (medium 4.6)
- [CVE-2006-1240](https://insights.sbomify.com/CVE-2006-1240/): Memory corruption in firebirdsql:firebird (medium 4.6)
- [CVE-2006-1239](https://insights.sbomify.com/CVE-2006-1239/): Cross-site scripting in countersoft:gemini (medium 4.3)
- [CVE-2006-1238](https://insights.sbomify.com/CVE-2006-1238/): SQL injection in dsportal:dslogin (medium 5.1)
- [CVE-2006-1237](https://insights.sbomify.com/CVE-2006-1237/): SQL injection in dsportal:dsnewsletter (high 7.5)
- [CVE-2006-1236](https://insights.sbomify.com/CVE-2006-1236/): Memory corruption in crossfire:crossfire (high 7.5)
- [CVE-2006-1235](https://insights.sbomify.com/CVE-2006-1235/): Path traversal in david ravenscroft:hithost (medium 5.0)
- [CVE-2006-1234](https://insights.sbomify.com/CVE-2006-1234/): SQL injection in dsportal:dscounter (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/58/