# Vulnerabilities published in 2006


- [CVE-2006-0716](https://insights.sbomify.com/CVE-2006-0716/): SQL injection in solucija:snews (high 7.5)
- [CVE-2006-0715](https://insights.sbomify.com/CVE-2006-0715/): Cross-site scripting in solucija:snews (medium 4.3)
- [CVE-2006-0714](https://insights.sbomify.com/CVE-2006-0714/): Path traversal in flyspray:flyspray (medium 5.0)
- [CVE-2006-0713](https://insights.sbomify.com/CVE-2006-0713/): Path traversal in linpha:linpha (medium 5.0)
- [CVE-2006-0712](https://insights.sbomify.com/CVE-2006-0712/): Other in squishdot:squishdot (medium 5.0)
- [CVE-2006-0711](https://insights.sbomify.com/CVE-2006-0711/): Auth bypass in neomail:neomail (medium 5.0)
- [CVE-2006-0710](https://insights.sbomify.com/CVE-2006-0710/): Memory corruption in isode:m-vault server (high 7.5)
- [CVE-2006-0709](https://insights.sbomify.com/CVE-2006-0709/): Memory corruption in metamail corporation:metamail (high 7.5)
- [CVE-2006-0708](https://insights.sbomify.com/CVE-2006-0708/): Memory corruption in nullsoft:winamp (critical 9.3)
- [CVE-2006-0707](https://insights.sbomify.com/CVE-2006-0707/): Path traversal in pyblosxom:pyblosxom (medium 5.0)
- [CVE-2006-0706](https://insights.sbomify.com/CVE-2006-0706/): Cross-site scripting in gastebuch:gastebuch (medium 4.3)
- [CVE-2006-0705](https://insights.sbomify.com/CVE-2006-0705/): Memory corruption in attachmatewrq:reflection for secure it server (medium 6.5)
- [CVE-2006-0704](https://insights.sbomify.com/CVE-2006-0704/): Information disclosure in ie:ie integrator (low 2.6)
- [CVE-2006-0703](https://insights.sbomify.com/CVE-2006-0703/): Cross-site scripting in imagevue:imagevue (medium 4.3)
- [CVE-2006-0702](https://insights.sbomify.com/CVE-2006-0702/): Path traversal in imagevue:imagevue (medium 5.0)
- [CVE-2006-0701](https://insights.sbomify.com/CVE-2006-0701/): Path traversal in imagevue:imagevue (medium 5.0)
- [CVE-2006-0700](https://insights.sbomify.com/CVE-2006-0700/): Information disclosure in imagevue:imagevue (medium 5.0)
- [CVE-2006-0699](https://insights.sbomify.com/CVE-2006-0699/): Cross-site scripting in david barrett:qwikiwiki (medium 4.3)
- [CVE-2006-0698](https://insights.sbomify.com/CVE-2006-0698/): Other in zen cart:zen cart (critical 10.0)
- [CVE-2006-0697](https://insights.sbomify.com/CVE-2006-0697/): Missing authorization in zen-cart:zen cart (critical 10.0)
- [CVE-2006-0696](https://insights.sbomify.com/CVE-2006-0696/): SQL injection in zen cart:zen cart (high 7.5)
- [CVE-2006-0695](https://insights.sbomify.com/CVE-2006-0695/): File upload in ansilove:ansilove (high 7.5)
- [CVE-2006-0694](https://insights.sbomify.com/CVE-2006-0694/): Path traversal in ansilove:ansilove (medium 5.0)
- [CVE-2006-0693](https://insights.sbomify.com/CVE-2006-0693/): SQL injection in roberto butti:calimba (high 7.5)
- [CVE-2006-0692](https://insights.sbomify.com/CVE-2006-0692/): SQL injection in carey briggs:php mysql timesheet (high 7.5)
- [CVE-2006-0691](https://insights.sbomify.com/CVE-2006-0691/): Missing authorization in scheduling management.com:time tracking software (medium 5.0)
- [CVE-2006-0690](https://insights.sbomify.com/CVE-2006-0690/): SQL injection in scheduling management.com:time tracking software (high 7.5)
- [CVE-2006-0689](https://insights.sbomify.com/CVE-2006-0689/): Cross-site scripting in scheduling management.com:time tracking software (medium 4.3)
- [CVE-2006-0688](https://insights.sbomify.com/CVE-2006-0688/): Code injection in nicecoder:indexu (high 7.5)
- [CVE-2006-0687](https://insights.sbomify.com/CVE-2006-0687/): Code injection in docmgr:docmgr (medium 5.0)
- [CVE-2006-0686](https://insights.sbomify.com/CVE-2006-0686/): Missing authorization in virtual hosting control system:virtual hosting control system (critical 10.0)
- [CVE-2006-0685](https://insights.sbomify.com/CVE-2006-0685/): Auth bypass in virtual hosting control system:virtual hosting control system (critical 10.0)
- [CVE-2006-0684](https://insights.sbomify.com/CVE-2006-0684/): Auth bypass in virtual hosting control system:virtual hosting control system (high 7.5)
- [CVE-2006-0683](https://insights.sbomify.com/CVE-2006-0683/): Cross-site scripting in virtual hosting control system:virtual hosting control system (medium 4.3)
- [CVE-2006-0682](https://insights.sbomify.com/CVE-2006-0682/): Cross-site scripting in e107:e107 (medium 4.3)
- [CVE-2006-0681](https://insights.sbomify.com/CVE-2006-0681/): Memory corruption in power daemon:power daemon (high 7.5)
- [CVE-2006-0680](https://insights.sbomify.com/CVE-2006-0680/): Auth bypass in plain black:webgui (medium 5.0)
- [CVE-2006-0679](https://insights.sbomify.com/CVE-2006-0679/): SQL injection in francisco burzi:php-nuke ev (high 7.5)
- [CVE-2006-0678](https://insights.sbomify.com/CVE-2006-0678/): Denial of service in postgresql:postgresql (low 1.5)
- [CVE-2006-0677](https://insights.sbomify.com/CVE-2006-0677/): Null dereference in kth:heimdal (high 7.8)
- [CVE-2006-0676](https://insights.sbomify.com/CVE-2006-0676/): Cross-site scripting in francisco burzi:php-nuke (medium 4.3)
- [CVE-2006-0675](https://insights.sbomify.com/CVE-2006-0675/): Cross-site scripting in glen campbell:siteframe (medium 4.3)
- [CVE-2006-0674](https://insights.sbomify.com/CVE-2006-0674/): Memory corruption in ibm:aix (medium 4.6)
- [CVE-2006-0673](https://insights.sbomify.com/CVE-2006-0673/): SQL injection in reamday enterprises:magic calendar lite (high 7.5)
- [CVE-2006-0672](https://insights.sbomify.com/CVE-2006-0672/): Other in hp:psc 1210 all-in-one (critical 10.0)
- [CVE-2006-0671](https://insights.sbomify.com/CVE-2006-0671/): Memory corruption in sony ericsson:k600i (high 7.8)
- [CVE-2006-0670](https://insights.sbomify.com/CVE-2006-0670/): Memory corruption in bluez project:hcidump (medium 5.0)
- [CVE-2006-0669](https://insights.sbomify.com/CVE-2006-0669/): SQL injection in gasoft:gas forum light (high 7.5)
- [CVE-2006-0668](https://insights.sbomify.com/CVE-2006-0668/): SQL injection in pwsphp:pwsphp (high 7.5)
- [CVE-2006-0667](https://insights.sbomify.com/CVE-2006-0667/): Other in ibm:aix (medium 4.6)
- [CVE-2006-0666](https://insights.sbomify.com/CVE-2006-0666/): Denial of service in ibm:aix (medium 4.9)
- [CVE-2006-0665](https://insights.sbomify.com/CVE-2006-0665/): Other in mantis:mantis (critical 10.0)
- [CVE-2006-0664](https://insights.sbomify.com/CVE-2006-0664/): Cross-site scripting in mantis:mantis (medium 4.3)
- [CVE-2006-0663](https://insights.sbomify.com/CVE-2006-0663/): Cross-site scripting in ibm:lotus domino inotes client (medium 4.3)
- [CVE-2006-0662](https://insights.sbomify.com/CVE-2006-0662/): Cross-site scripting in ibm:lotus domino inotes client (medium 4.3)
- [CVE-2006-0661](https://insights.sbomify.com/CVE-2006-0661/): Cross-site scripting in scriptme:sme blog host (medium 4.3)
- [CVE-2006-0660](https://insights.sbomify.com/CVE-2006-0660/): Path traversal in farsinews:farsinews (medium 6.4)
- [CVE-2006-0659](https://insights.sbomify.com/CVE-2006-0659/): Code injection in runcms:runcms (medium 6.8)
- [CVE-2006-0658](https://insights.sbomify.com/CVE-2006-0658/): File upload in fckeditor:fckeditor (medium 5.0)
- [CVE-2006-0657](https://insights.sbomify.com/CVE-2006-0657/): Cross-site scripting in softcomplex:php event calendar (low 3.5)
- [CVE-2006-0656](https://insights.sbomify.com/CVE-2006-0656/): Path traversal in hp:systems insight manager (medium 5.0)
- [CVE-2006-0655](https://insights.sbomify.com/CVE-2006-0655/): Cross-site scripting in hinton design:phpht topsites (medium 4.3)
- [CVE-2006-0654](https://insights.sbomify.com/CVE-2006-0654/): Auth bypass in hinton design:phpht topsites (high 7.5)
- [CVE-2006-0653](https://insights.sbomify.com/CVE-2006-0653/): SQL injection in hinton design:phpht topsites (high 7.5)
- [CVE-2006-0652](https://insights.sbomify.com/CVE-2006-0652/): Misconfiguration in whmcompletesolution:whmcompletesolution (medium 6.5)
- [CVE-2006-0651](https://insights.sbomify.com/CVE-2006-0651/): SQL injection in vwdev:vwdev (high 7.5)
- [CVE-2006-0650](https://insights.sbomify.com/CVE-2006-0650/): Cross-site scripting in cpaint:cpaint (medium 4.3)
- [CVE-2006-0649](https://insights.sbomify.com/CVE-2006-0649/): Cross-site scripting in dataparksearch:dataparksearch (medium 4.3)
- [CVE-2006-0648](https://insights.sbomify.com/CVE-2006-0648/): Path traversal in php icalendar:php icalendar (medium 5.0)
- [CVE-2006-0647](https://insights.sbomify.com/CVE-2006-0647/): Denial of service in sun:java system directory server (medium 5.0)
- [CVE-2006-0646](https://insights.sbomify.com/CVE-2006-0646/): Other in suse:suse linux (medium 4.4)
- [CVE-2006-0645](https://insights.sbomify.com/CVE-2006-0645/): Memory corruption in free software foundation inc.:libtasn1 (high 7.5)
- [CVE-2006-0644](https://insights.sbomify.com/CVE-2006-0644/): Path traversal in cpg-nuke:dragonfly cms (high 7.5)
- [CVE-2006-0643](https://insights.sbomify.com/CVE-2006-0643/): Cross-site scripting in wiredred:e pop web conferencing (medium 4.3)
- [CVE-2006-0642](https://insights.sbomify.com/CVE-2006-0642/): Security feature bypass in trend micro:interscan messaging security suite (medium 5.1)
- [CVE-2006-0641](https://insights.sbomify.com/CVE-2006-0641/): Information disclosure in orbicule:undercover (low 2.6)
- [CVE-2006-0640](https://insights.sbomify.com/CVE-2006-0640/): Security feature bypass in orbicule:undercover (low 2.1)
- [CVE-2006-0639](https://insights.sbomify.com/CVE-2006-0639/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-0638](https://insights.sbomify.com/CVE-2006-0638/): SQL injection in mybulletinboard:mybulletinboard (medium 6.5)
- [CVE-2006-0637](https://insights.sbomify.com/CVE-2006-0637/): Memory corruption in qualcomm:eudora worldmail (high 7.5)
- [CVE-2006-0636](https://insights.sbomify.com/CVE-2006-0636/): Code injection in eyeos project:eyeos (high 7.5)
- [CVE-2006-0635](https://insights.sbomify.com/CVE-2006-0635/): Integer overflow in fabrice bellard:tiny c compiler (medium 4.6)
- [CVE-2006-0634](https://insights.sbomify.com/CVE-2006-0634/): Integer overflow in borland software:c\+\+ builder (medium 4.6)
- [CVE-2006-0633](https://insights.sbomify.com/CVE-2006-0633/): Weak cryptography in invisionpower:invision power board (medium 6.4)
- [CVE-2006-0632](https://insights.sbomify.com/CVE-2006-0632/): Weak cryptography in phpbb group:phpbb (medium 6.4)
- [CVE-2006-0631](https://insights.sbomify.com/CVE-2006-0631/): Other in erik c. thauvin:mailback (medium 5.0)
- [CVE-2006-0630](https://insights.sbomify.com/CVE-2006-0630/): Security feature bypass in ritlabs:the bat (medium 5.0)
- [CVE-2006-0629](https://insights.sbomify.com/CVE-2006-0629/): Memory corruption in aol:instant messenger (medium 5.1)
- [CVE-2006-0628](https://insights.sbomify.com/CVE-2006-0628/): Command injection in dale ray:myquiz (high 7.5)
- [CVE-2006-0627](https://insights.sbomify.com/CVE-2006-0627/): Cross-site scripting in clever copy:clever copy (medium 4.3)
- [CVE-2006-0626](https://insights.sbomify.com/CVE-2006-0626/): SQL injection in spip:spip (high 7.5)
- [CVE-2006-0625](https://insights.sbomify.com/CVE-2006-0625/): Path traversal in spip:spip (medium 6.4)
- [CVE-2006-0624](https://insights.sbomify.com/CVE-2006-0624/): SQL injection in webeveyn:whomp real estate manager xp 2005 (high 7.5)
- [CVE-2006-0623](https://insights.sbomify.com/CVE-2006-0623/): Misconfiguration in qnx:rtos (high 7.2)
- [CVE-2006-0622](https://insights.sbomify.com/CVE-2006-0622/): Denial of service in qnx:rtos (medium 4.9)
- [CVE-2006-0621](https://insights.sbomify.com/CVE-2006-0621/): Memory corruption in qnx:rtos (high 7.2)
- [CVE-2006-0620](https://insights.sbomify.com/CVE-2006-0620/): Race condition in qnx:rtos (medium 6.2)
- [CVE-2006-0619](https://insights.sbomify.com/CVE-2006-0619/): Memory corruption in qnx:rtos (medium 4.6)
- [CVE-2006-0618](https://insights.sbomify.com/CVE-2006-0618/): Memory corruption in qnx:neutrino rtos (medium 4.6)
- [CVE-2006-0617](https://insights.sbomify.com/CVE-2006-0617/): Security feature bypass in sun:jdk (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/64/