# Vulnerabilities published in 2006


- [CVE-2006-0509](https://insights.sbomify.com/CVE-2006-0509/): Cross-site scripting in cerberus:cerberus helpdesk (medium 4.3)
- [CVE-2006-0508](https://insights.sbomify.com/CVE-2006-0508/): Misconfiguration in easy cms:easy cms (medium 5.0)
- [CVE-2006-0507](https://insights.sbomify.com/CVE-2006-0507/): Cross-site scripting in easy cms:easy cms (medium 4.3)
- [CVE-2006-0506](https://insights.sbomify.com/CVE-2006-0506/): Cross-site scripting in nuked-klan:nuked-klan (medium 4.3)
- [CVE-2006-0505](https://insights.sbomify.com/CVE-2006-0505/): Denial of service in zbattle.net:zbattle client (medium 5.0)
- [CVE-2006-0504](https://insights.sbomify.com/CVE-2006-0504/): Denial of service in mailenable:mailenable enterprise (medium 5.0)
- [CVE-2006-0503](https://insights.sbomify.com/CVE-2006-0503/): Denial of service in mailenable:mailenable professional (medium 5.0)
- [CVE-2006-0502](https://insights.sbomify.com/CVE-2006-0502/): Code injection in farsinews:farsinews (high 7.5)
- [CVE-2006-0501](https://insights.sbomify.com/CVE-2006-0501/): Cross-site scripting in punctweb:myco guestbook (medium 4.3)
- [CVE-2006-0500](https://insights.sbomify.com/CVE-2006-0500/): Misconfiguration in punctweb:myco guestbook (high 7.5)
- [CVE-2006-0499](https://insights.sbomify.com/CVE-2006-0499/): Cross-site scripting in yourboard:rlink (medium 4.3)
- [CVE-2006-0498](https://insights.sbomify.com/CVE-2006-0498/): Cross-site scripting in php gen:php gen (medium 4.3)
- [CVE-2006-0497](https://insights.sbomify.com/CVE-2006-0497/): SQL injection in php gen:php gen (high 7.5)
- [CVE-2006-0496](https://insights.sbomify.com/CVE-2006-0496/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2006-0495](https://insights.sbomify.com/CVE-2006-0495/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-0494](https://insights.sbomify.com/CVE-2006-0494/): Path traversal in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-0493](https://insights.sbomify.com/CVE-2006-0493/): Cross-site scripting in thomas rybak:mg2 (medium 4.3)
- [CVE-2006-0492](https://insights.sbomify.com/CVE-2006-0492/): SQL injection in vincent hor:calendarix (high 7.5)
- [CVE-2006-0491](https://insights.sbomify.com/CVE-2006-0491/): SQL injection in subzane:szusermgnt (high 7.5)
- [CVE-2006-0490](https://insights.sbomify.com/CVE-2006-0490/): SQL injection in aspthai.net:aspthai forums (high 7.5)
- [CVE-2006-0489](https://insights.sbomify.com/CVE-2006-0489/): Memory corruption in khaled mardam-bey:mirc (medium 4.6)
- [CVE-2006-0488](https://insights.sbomify.com/CVE-2006-0488/): Information disclosure in microsoft:windows 2000 (low 2.1)
- [CVE-2006-0487](https://insights.sbomify.com/CVE-2006-0487/): Other in tumbleweed:mailgate email firewall (medium 5.0)
- [CVE-2006-0486](https://insights.sbomify.com/CVE-2006-0486/): Privilege escalation in cisco:ios (medium 4.6)
- [CVE-2006-0485](https://insights.sbomify.com/CVE-2006-0485/): Security feature bypass in cisco:ios (medium 4.6)
- [CVE-2006-0484](https://insights.sbomify.com/CVE-2006-0484/): Path traversal in elido:face control (medium 5.0)
- [CVE-2006-0483](https://insights.sbomify.com/CVE-2006-0483/): Denial of service in cisco:vpn 3000 concentrator series software (high 7.8)
- [CVE-2006-0482](https://insights.sbomify.com/CVE-2006-0482/): Denial of service in linux:linux kernel (low 2.1)
- [CVE-2006-0481](https://insights.sbomify.com/CVE-2006-0481/): Memory corruption in greg roelofs:libpng (medium 5.0)
- [CVE-2006-0480](https://insights.sbomify.com/CVE-2006-0480/): Cross-site scripting in spaiz:spaiz-nuke cms (medium 4.3)
- [CVE-2006-0479](https://insights.sbomify.com/CVE-2006-0479/): Security feature bypass in pmwiki:pmwiki (medium 4.3)
- [CVE-2006-0478](https://insights.sbomify.com/CVE-2006-0478/): Missing authorization in cre loaded:cre loaded (high 7.5)
- [CVE-2006-0477](https://insights.sbomify.com/CVE-2006-0477/): Memory corruption in git:git (high 7.5)
- [CVE-2006-0476](https://insights.sbomify.com/CVE-2006-0476/): Memory corruption in nullsoft:winamp (high 7.6)
- [CVE-2006-0475](https://insights.sbomify.com/CVE-2006-0475/): Denial of service in theworldsend.net:php-ping (medium 5.0)
- [CVE-2006-0474](https://insights.sbomify.com/CVE-2006-0474/): Integer overflow in shareaza:shareaza (high 7.5)
- [CVE-2006-0473](https://insights.sbomify.com/CVE-2006-0473/): Cross-site scripting in my little homepage:my little weblog (medium 4.3)
- [CVE-2006-0472](https://insights.sbomify.com/CVE-2006-0472/): Cross-site scripting in my little homepage:my little guestbook (medium 4.3)
- [CVE-2006-0471](https://insights.sbomify.com/CVE-2006-0471/): Cross-site scripting in my little homepage:my little forum (medium 4.3)
- [CVE-2006-0470](https://insights.sbomify.com/CVE-2006-0470/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-0469](https://insights.sbomify.com/CVE-2006-0469/): Cross-site scripting in uebimiau:uebimiau (medium 4.3)
- [CVE-2006-0468](https://insights.sbomify.com/CVE-2006-0468/): Memory corruption in stalker:communigate pro (high 7.5)
- [CVE-2006-0467](https://insights.sbomify.com/CVE-2006-0467/): Denial of service in pioneers:pioneers (medium 5.0)
- [CVE-2006-0466](https://insights.sbomify.com/CVE-2006-0466/): Cross-site scripting in goldstag:goldstag content management system (medium 4.3)
- [CVE-2006-0465](https://insights.sbomify.com/CVE-2006-0465/): Cross-site scripting in active121:site manager (medium 4.3)
- [CVE-2006-0464](https://insights.sbomify.com/CVE-2006-0464/): SQL injection in ideosoft design:ideocontent manager (high 7.5)
- [CVE-2006-0463](https://insights.sbomify.com/CVE-2006-0463/): Cross-site scripting in ideosoft design:ideocontent manager (medium 4.3)
- [CVE-2006-0462](https://insights.sbomify.com/CVE-2006-0462/): SQL injection in andonet:andonet blog (high 7.5)
- [CVE-2006-0461](https://insights.sbomify.com/CVE-2006-0461/): Cross-site scripting in pmachine:expressionengine (medium 4.3)
- [CVE-2006-0460](https://insights.sbomify.com/CVE-2006-0460/): Memory corruption in bomberclone:bomberclone (high 7.5)
- [CVE-2006-0459](https://insights.sbomify.com/CVE-2006-0459/): Memory corruption in westes:flex (high 7.5)
- [CVE-2006-0458](https://insights.sbomify.com/CVE-2006-0458/): Denial of service in irssi:irssi (medium 5.0)
- [CVE-2006-0457](https://insights.sbomify.com/CVE-2006-0457/): Race condition in linux:linux kernel (high 7.1)
- [CVE-2006-0456](https://insights.sbomify.com/CVE-2006-0456/): Denial of service in linux:linux kernel (low 2.1)
- [CVE-2006-0455](https://insights.sbomify.com/CVE-2006-0455/): Security feature bypass in gnu:privacy guard (medium 4.6)
- [CVE-2006-0454](https://insights.sbomify.com/CVE-2006-0454/): Denial of service in linux:linux kernel (medium 5.0)
- [CVE-2006-0453](https://insights.sbomify.com/CVE-2006-0453/): Memory corruption in redhat:fedora core (high 7.8)
- [CVE-2006-0452](https://insights.sbomify.com/CVE-2006-0452/): Denial of service in redhat:fedora core (medium 5.0)
- [CVE-2006-0451](https://insights.sbomify.com/CVE-2006-0451/): Denial of service in redhat:fedora core (medium 5.0)
- [CVE-2006-0450](https://insights.sbomify.com/CVE-2006-0450/): Denial of service in phpbb group:phpbb (medium 5.0)
- [CVE-2006-0449](https://insights.sbomify.com/CVE-2006-0449/): Denial of service in e-post corporation:mail server (medium 5.0)
- [CVE-2006-0448](https://insights.sbomify.com/CVE-2006-0448/): Path traversal in e-post corporation:mail server (high 7.5)
- [CVE-2006-0447](https://insights.sbomify.com/CVE-2006-0447/): Memory corruption in e-post corporation:mail server (high 7.5)
- [CVE-2006-0446](https://insights.sbomify.com/CVE-2006-0446/): Command injection in webwork:webwork (medium 6.5)
- [CVE-2006-0445](https://insights.sbomify.com/CVE-2006-0445/): Information disclosure in phpclanwebsite:phpclanwebsite (medium 4.0)
- [CVE-2006-0444](https://insights.sbomify.com/CVE-2006-0444/): SQL injection in phpclanwebsite:phpclanwebsite (medium 6.8)
- [CVE-2006-0443](https://insights.sbomify.com/CVE-2006-0443/): Cross-site scripting in cheesyblog:cheesyblog (medium 4.3)
- [CVE-2006-0442](https://insights.sbomify.com/CVE-2006-0442/): Cross-site scripting in mybb:mybb (medium 4.3)
- [CVE-2006-0441](https://insights.sbomify.com/CVE-2006-0441/): Memory corruption in karjasoft:sami ftp server (high 7.5)
- [CVE-2006-0440](https://insights.sbomify.com/CVE-2006-0440/): Auth bypass in text rider:text rider (medium 5.0)
- [CVE-2006-0439](https://insights.sbomify.com/CVE-2006-0439/): Information disclosure in text rider:text rider (medium 5.0)
- [CVE-2006-0438](https://insights.sbomify.com/CVE-2006-0438/): Cross-site request forgery in phpbb group:phpbb (medium 5.0)
- [CVE-2006-0437](https://insights.sbomify.com/CVE-2006-0437/): Cross-site scripting in phpbb group:phpbb (medium 4.3)
- [CVE-2006-0436](https://insights.sbomify.com/CVE-2006-0436/): Privilege escalation in hp:hp-ux (high 7.2)
- [CVE-2006-0435](https://insights.sbomify.com/CVE-2006-0435/): Security feature bypass in oracle:application server (high 7.5)
- [CVE-2006-0434](https://insights.sbomify.com/CVE-2006-0434/): Path traversal in phpxplorer:phpxplorer (medium 5.0)
- [CVE-2006-0433](https://insights.sbomify.com/CVE-2006-0433/): Denial of service in freebsd:freebsd (medium 5.0)
- [CVE-2006-0432](https://insights.sbomify.com/CVE-2006-0432/): Security feature bypass in bea:weblogic server (low 2.1)
- [CVE-2006-0431](https://insights.sbomify.com/CVE-2006-0431/): Information disclosure in bea:weblogic server (low 2.1)
- [CVE-2006-0430](https://insights.sbomify.com/CVE-2006-0430/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2006-0429](https://insights.sbomify.com/CVE-2006-0429/): Security feature bypass in bea:weblogic server (low 2.1)
- [CVE-2006-0428](https://insights.sbomify.com/CVE-2006-0428/): Auth bypass in oracle:weblogic portal (high 7.5)
- [CVE-2006-0427](https://insights.sbomify.com/CVE-2006-0427/): Information disclosure in bea:weblogic server (low 2.1)
- [CVE-2006-0426](https://insights.sbomify.com/CVE-2006-0426/): Information disclosure in bea:weblogic server (high 7.5)
- [CVE-2006-0425](https://insights.sbomify.com/CVE-2006-0425/): Information disclosure in oracle:weblogic portal (medium 5.0)
- [CVE-2006-0424](https://insights.sbomify.com/CVE-2006-0424/): Information disclosure in bea:weblogic server (medium 4.0)
- [CVE-2006-0423](https://insights.sbomify.com/CVE-2006-0423/): Information disclosure in oracle:weblogic portal (high 7.5)
- [CVE-2006-0422](https://insights.sbomify.com/CVE-2006-0422/): Other in bea:weblogic server (medium 6.4)
- [CVE-2006-0421](https://insights.sbomify.com/CVE-2006-0421/): Privilege escalation in bea:weblogic server (medium 4.6)
- [CVE-2006-0420](https://insights.sbomify.com/CVE-2006-0420/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2006-0419](https://insights.sbomify.com/CVE-2006-0419/): Misconfiguration in bea:weblogic server (medium 6.4)
- [CVE-2006-0418](https://insights.sbomify.com/CVE-2006-0418/): Code injection in topcmm computing:123 flash chat server (high 7.5)
- [CVE-2006-0417](https://insights.sbomify.com/CVE-2006-0417/): SQL injection in mywebland:minibloggie (high 7.5)
- [CVE-2006-0416](https://insights.sbomify.com/CVE-2006-0416/): Auth bypass in sleeperchat:sleeperchat (medium 5.0)
- [CVE-2006-0415](https://insights.sbomify.com/CVE-2006-0415/): Cross-site scripting in sleeperchat:sleeperchat (medium 4.3)
- [CVE-2006-0414](https://insights.sbomify.com/CVE-2006-0414/): Information disclosure in tor:tor (medium 5.0)
- [CVE-2006-0413](https://insights.sbomify.com/CVE-2006-0413/): SQL injection in newsphp:newsphp (high 7.5)
- [CVE-2006-0412](https://insights.sbomify.com/CVE-2006-0412/): SQL injection in gencbeyin web programlama:cybershop (high 7.5)
- [CVE-2006-0411](https://insights.sbomify.com/CVE-2006-0411/): Weak cryptography in claroline:claroline (critical 10.0)
- [CVE-2006-0410](https://insights.sbomify.com/CVE-2006-0410/): SQL injection in john lim:adodb (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/66/