# Vulnerabilities published in 2006


- [CVE-2006-1022](https://insights.sbomify.com/CVE-2006-1022/): Code injection in pehepe:membership management system (medium 5.0)
- [CVE-2006-1021](https://insights.sbomify.com/CVE-2006-1021/): Cross-site scripting in pehepe:membership management system (medium 4.3)
- [CVE-2006-1020](https://insights.sbomify.com/CVE-2006-1020/): SQL injection in johnny vegas:vegas forum (high 7.5)
- [CVE-2006-1019](https://insights.sbomify.com/CVE-2006-1019/): Cross-site scripting in ukiweb:ukiboard (medium 4.3)
- [CVE-2006-1018](https://insights.sbomify.com/CVE-2006-1018/): SQL injection in dci-designs:dawaween (high 7.5)
- [CVE-2006-1017](https://insights.sbomify.com/CVE-2006-1017/): Security feature bypass in php:php (critical 9.3)
- [CVE-2006-1016](https://insights.sbomify.com/CVE-2006-1016/): Memory corruption in microsoft:internet explorer (high 7.5)
- [CVE-2006-1015](https://insights.sbomify.com/CVE-2006-1015/): Command injection in php:php (medium 6.4)
- [CVE-2006-1014](https://insights.sbomify.com/CVE-2006-1014/): Command injection in php:php (low 3.2)
- [CVE-2006-1013](https://insights.sbomify.com/CVE-2006-1013/): Code injection in smartblog:smartblog (high 7.5)
- [CVE-2006-1012](https://insights.sbomify.com/CVE-2006-1012/): SQL injection in wordpress:wordpress (high 7.5)
- [CVE-2006-1011](https://insights.sbomify.com/CVE-2006-1011/): Information disclosure in peters software:lettermerger (low 2.1)
- [CVE-2006-1010](https://insights.sbomify.com/CVE-2006-1010/): Memory corruption in crossfire:crossfire (medium 6.4)
- [CVE-2006-1009](https://insights.sbomify.com/CVE-2006-1009/): Hardcoded credentials in m4 project:enigma-suite (medium 4.6)
- [CVE-2006-1008](https://insights.sbomify.com/CVE-2006-1008/): Cross-site scripting in nathan landry:n8cms sitesuite cms (medium 5.8)
- [CVE-2006-1007](https://insights.sbomify.com/CVE-2006-1007/): SQL injection in nathan landry:n8cms sitesuite cms (high 7.5)
- [CVE-2006-1006](https://insights.sbomify.com/CVE-2006-1006/): SQL injection in sendcard:sendcard (high 7.5)
- [CVE-2006-1005](https://insights.sbomify.com/CVE-2006-1005/): Information disclosure in cactusoft:parodia (medium 6.4)
- [CVE-2006-1004](https://insights.sbomify.com/CVE-2006-1004/): Cross-site scripting in cactusoft:parodia (medium 4.3)
- [CVE-2006-1003](https://insights.sbomify.com/CVE-2006-1003/): Information disclosure in netgear:wgt624 (medium 5.0)
- [CVE-2006-1002](https://insights.sbomify.com/CVE-2006-1002/): Hardcoded credentials in netgear:wgt624 (critical 10.0)
- [CVE-2006-1001](https://insights.sbomify.com/CVE-2006-1001/): SQL injection in lansuite:lanparty intranet system (medium 5.0)
- [CVE-2006-10003](https://insights.sbomify.com/CVE-2006-10003/): XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack (critical 9.8)
- [CVE-2006-10002](https://insights.sbomify.com/CVE-2006-10002/): Memory corruption in XML::Parser (critical 9.8)
- [CVE-2006-10001](https://insights.sbomify.com/CVE-2006-10001/): Subscribe to Comments Plugin subscribe-to-comments.php cross site scripting (low 3.5)
- [CVE-2006-1000](https://insights.sbomify.com/CVE-2006-1000/): SQL injection in g2soft:pentacle in-out board (critical 10.0)
- [CVE-2006-0999](https://insights.sbomify.com/CVE-2006-0999/): Weak cryptography in novell:netware (medium 5.0)
- [CVE-2006-0998](https://insights.sbomify.com/CVE-2006-0998/): Weak cryptography in novell:netware (medium 5.0)
- [CVE-2006-0997](https://insights.sbomify.com/CVE-2006-0997/): Weak cryptography in novell:netware (medium 5.0)
- [CVE-2006-0996](https://insights.sbomify.com/CVE-2006-0996/): Cross-site scripting in php:php (medium 4.3)
- [CVE-2006-0995](https://insights.sbomify.com/CVE-2006-0995/): Denial of service in emc dantz:retrospect (medium 5.0)
- [CVE-2006-0994](https://insights.sbomify.com/CVE-2006-0994/): Memory corruption in sophos:sophos anti-virus (high 7.5)
- [CVE-2006-0993](https://insights.sbomify.com/CVE-2006-0993/): Information disclosure in 3com:tippingpoint sms server (medium 5.0)
- [CVE-2006-0992](https://insights.sbomify.com/CVE-2006-0992/): Memory corruption in novell:groupwise messenger (critical 10.0)
- [CVE-2006-0991](https://insights.sbomify.com/CVE-2006-0991/): Memory corruption in veritas:netbackup (high 7.1)
- [CVE-2006-0990](https://insights.sbomify.com/CVE-2006-0990/): Memory corruption in veritas:netbackup (critical 9.0)
- [CVE-2006-0989](https://insights.sbomify.com/CVE-2006-0989/): Memory corruption in veritas:netbackup (critical 9.0)
- [CVE-2006-0988](https://insights.sbomify.com/CVE-2006-0988/): Misconfiguration in microsoft:windows 2000 (high 7.8)
- [CVE-2006-0987](https://insights.sbomify.com/CVE-2006-0987/): Misconfiguration in isc:bind (medium 5.0)
- [CVE-2006-0986](https://insights.sbomify.com/CVE-2006-0986/): Information disclosure in wordpress:wordpress (medium 5.0)
- [CVE-2006-0985](https://insights.sbomify.com/CVE-2006-0985/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2006-0984](https://insights.sbomify.com/CVE-2006-0984/): Cross-site scripting in ej3:topo (medium 4.3)
- [CVE-2006-0983](https://insights.sbomify.com/CVE-2006-0983/): Cross-site scripting in david barrett:qwikiwiki (medium 4.3)
- [CVE-2006-0982](https://insights.sbomify.com/CVE-2006-0982/): Security feature bypass in mcafee:virex (medium 5.0)
- [CVE-2006-0981](https://insights.sbomify.com/CVE-2006-0981/): Path traversal in e-merge:e-merge winace (medium 4.0)
- [CVE-2006-0980](https://insights.sbomify.com/CVE-2006-0980/): Cross-site scripting in jay eckles:cgi calendar (medium 4.3)
- [CVE-2006-0979](https://insights.sbomify.com/CVE-2006-0979/): Other in nidelven it:issue dealer (critical 10.0)
- [CVE-2006-0978](https://insights.sbomify.com/CVE-2006-0978/): Cross-site scripting in argosoft:argosoft mail server (medium 4.3)
- [CVE-2006-0977](https://insights.sbomify.com/CVE-2006-0977/): Misconfiguration in craig morrison:mts pro (medium 5.0)
- [CVE-2006-0976](https://insights.sbomify.com/CVE-2006-0976/): Path traversal in spid:spid (medium 5.0)
- [CVE-2006-0974](https://insights.sbomify.com/CVE-2006-0974/): Cross-site scripting in battleaxe software:bttlxeforum (medium 4.3)
- [CVE-2006-0973](https://insights.sbomify.com/CVE-2006-0973/): SQL injection in phpwebsite:phpwebsite (high 7.5)
- [CVE-2006-0972](https://insights.sbomify.com/CVE-2006-0972/): SQL injection in fscripts:fantastic news (medium 5.0)
- [CVE-2006-0971](https://insights.sbomify.com/CVE-2006-0971/): Path traversal in lionel reyero:directcontact (medium 5.0)
- [CVE-2006-0970](https://insights.sbomify.com/CVE-2006-0970/): Code injection in activecampaign:1-2-all (high 7.5)
- [CVE-2006-0969](https://insights.sbomify.com/CVE-2006-0969/): Code injection in pixelartkingdom:top sites (high 7.5)
- [CVE-2006-0968](https://insights.sbomify.com/CVE-2006-0968/): Code injection in ncp network communications:secure client (high 7.2)
- [CVE-2006-0967](https://insights.sbomify.com/CVE-2006-0967/): Denial of service in ncp network communications:secure client (low 2.1)
- [CVE-2006-0966](https://insights.sbomify.com/CVE-2006-0966/): Denial of service in ncp network communications:secure client (low 2.1)
- [CVE-2006-0965](https://insights.sbomify.com/CVE-2006-0965/): Memory corruption in ncp network communications:secure client (medium 4.6)
- [CVE-2006-0964](https://insights.sbomify.com/CVE-2006-0964/): Security feature bypass in ncp network communications:secure client (medium 4.6)
- [CVE-2006-0963](https://insights.sbomify.com/CVE-2006-0963/): Memory corruption in stlport project:stlport (medium 4.6)
- [CVE-2006-0962](https://insights.sbomify.com/CVE-2006-0962/): SQL injection in vubb:vubb (high 7.5)
- [CVE-2006-0961](https://insights.sbomify.com/CVE-2006-0961/): SQL injection in cilem:cilem haber (high 7.5)
- [CVE-2006-0960](https://insights.sbomify.com/CVE-2006-0960/): Denial of service in compex:netpassage wpe54g (medium 5.0)
- [CVE-2006-0959](https://insights.sbomify.com/CVE-2006-0959/): SQL injection in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2006-0958](https://insights.sbomify.com/CVE-2006-0958/): Cross-site scripting in zoneo-soft:freeforum (medium 4.3)
- [CVE-2006-0957](https://insights.sbomify.com/CVE-2006-0957/): Code injection in zoneo-soft:freeforum (high 7.5)
- [CVE-2006-0956](https://insights.sbomify.com/CVE-2006-0956/): Denial of service in nufw:nufw firewall (low 1.7)
- [CVE-2006-0951](https://insights.sbomify.com/CVE-2006-0951/): Privilege escalation in eset software:nod32 antivirus (high 7.2)
- [CVE-2006-0950](https://insights.sbomify.com/CVE-2006-0950/): Path traversal in unalz:unalz (low 2.6)
- [CVE-2006-0949](https://insights.sbomify.com/CVE-2006-0949/): Information disclosure in raidenhttpd:raidenhttpd (medium 5.0)
- [CVE-2006-0948](https://insights.sbomify.com/CVE-2006-0948/): Misconfiguration in aol:aol (high 7.2)
- [CVE-2006-0947](https://insights.sbomify.com/CVE-2006-0947/): Cross-site scripting in thomson:speedtouch (high 7.5)
- [CVE-2006-0946](https://insights.sbomify.com/CVE-2006-0946/): Cross-site scripting in thomson:speedtouch (medium 4.3)
- [CVE-2006-0945](https://insights.sbomify.com/CVE-2006-0945/): Code injection in archangelmgt:weblog (medium 6.5)
- [CVE-2006-0944](https://insights.sbomify.com/CVE-2006-0944/): Auth bypass in archangelmgt:weblog (high 7.5)
- [CVE-2006-0943](https://insights.sbomify.com/CVE-2006-0943/): SQL injection in pwsphp:pwsphp (high 7.5)
- [CVE-2006-0942](https://insights.sbomify.com/CVE-2006-0942/): SQL injection in pwsphp:pwsphp (high 7.5)
- [CVE-2006-0941](https://insights.sbomify.com/CVE-2006-0941/): Cross-site scripting in cynical games:shoutlive (medium 4.3)
- [CVE-2006-0940](https://insights.sbomify.com/CVE-2006-0940/): Code injection in cynical games:shoutlive (high 7.5)
- [CVE-2006-0939](https://insights.sbomify.com/CVE-2006-0939/): SQL injection in dci-designs:dci-taskeen (high 7.5)
- [CVE-2006-0938](https://insights.sbomify.com/CVE-2006-0938/): Cross-site scripting in ez:ez publish (medium 4.3)
- [CVE-2006-0937](https://insights.sbomify.com/CVE-2006-0937/): Information disclosure in unu networks:mailgust (medium 5.0)
- [CVE-2006-0936](https://insights.sbomify.com/CVE-2006-0936/): File upload in free host shop:website generator (medium 6.5)
- [CVE-2006-0935](https://insights.sbomify.com/CVE-2006-0935/): Denial of service in microsoft:word (low 2.6)
- [CVE-2006-0934](https://insights.sbomify.com/CVE-2006-0934/): Cross-site scripting in limbo cms:limbo cms (medium 4.3)
- [CVE-2006-0933](https://insights.sbomify.com/CVE-2006-0933/): Cross-site scripting in phpx:phpx (medium 4.3)
- [CVE-2006-0932](https://insights.sbomify.com/CVE-2006-0932/): Path traversal in pear:pear archive zip (medium 5.0)
- [CVE-2006-0931](https://insights.sbomify.com/CVE-2006-0931/): PEAR::Archive_Tar Directory Traversal vulnerability (medium 5.0)
- [CVE-2006-0930](https://insights.sbomify.com/CVE-2006-0930/): Path traversal in argosoft:argosoft mail server (medium 4.0)
- [CVE-2006-0929](https://insights.sbomify.com/CVE-2006-0929/): Path traversal in argosoft:argosoft mail server (medium 4.0)
- [CVE-2006-0928](https://insights.sbomify.com/CVE-2006-0928/): Information disclosure in argosoft:argosoft mail server (medium 5.0)
- [CVE-2006-0927](https://insights.sbomify.com/CVE-2006-0927/): Cross-site scripting in jgs-xa:jgs-gallery addon (low 2.6)
- [CVE-2006-0926](https://insights.sbomify.com/CVE-2006-0926/): Path traversal in smithmicro:stuffit deluxe (low 2.6)
- [CVE-2006-0925](https://insights.sbomify.com/CVE-2006-0925/): Denial of service in alt-n:mdaemon (medium 5.0)
- [CVE-2006-0924](https://insights.sbomify.com/CVE-2006-0924/): Cross-site scripting in brown bear software:ical (medium 4.3)
- [CVE-2006-0923](https://insights.sbomify.com/CVE-2006-0923/): Cross-site scripting in myphpnuke:myphpnuke (medium 4.3)
- [CVE-2006-0922](https://insights.sbomify.com/CVE-2006-0922/): Missing authorization in devellion:cubecart (medium 5.0)
- [CVE-2006-0921](https://insights.sbomify.com/CVE-2006-0921/): Path traversal in fckeditor:fckeditor (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/61/