# Vulnerabilities published in 2006


- [CVE-2006-0409](https://insights.sbomify.com/CVE-2006-0409/): Cross-site scripting in pixelpost:photoblog (medium 4.3)
- [CVE-2006-0408](https://insights.sbomify.com/CVE-2006-0408/): Privilege escalation in sun:grid engine (high 7.2)
- [CVE-2006-0407](https://insights.sbomify.com/CVE-2006-0407/): Cross-site scripting in azbb:az bulletin board (medium 4.3)
- [CVE-2006-0406](https://insights.sbomify.com/CVE-2006-0406/): Information disclosure in mybulletinboard:mybulletinboard (medium 5.0)
- [CVE-2006-0405](https://insights.sbomify.com/CVE-2006-0405/): Null dereference in libtiff:libtiff (medium 5.0)
- [CVE-2006-0404](https://insights.sbomify.com/CVE-2006-0404/): Information disclosure in mike macgirvin:note-a-day weblog (medium 5.0)
- [CVE-2006-0403](https://insights.sbomify.com/CVE-2006-0403/): SQL injection in e-moblog:e-moblog (high 7.5)
- [CVE-2006-0402](https://insights.sbomify.com/CVE-2006-0402/): SQL injection in jason geiger:zoph (high 7.5)
- [CVE-2006-0401](https://insights.sbomify.com/CVE-2006-0401/): Security feature bypass in apple:mac os x (medium 4.6)
- [CVE-2006-0400](https://insights.sbomify.com/CVE-2006-0400/): Security feature bypass in apple:mac os x (high 7.5)
- [CVE-2006-0399](https://insights.sbomify.com/CVE-2006-0399/): Security feature bypass in apple:mac os x (high 7.5)
- [CVE-2006-0398](https://insights.sbomify.com/CVE-2006-0398/): Security feature bypass in apple:mac os x (high 7.5)
- [CVE-2006-0397](https://insights.sbomify.com/CVE-2006-0397/): Security feature bypass in apple:mac os x (high 7.5)
- [CVE-2006-0396](https://insights.sbomify.com/CVE-2006-0396/): Memory corruption in apple:mac os x (medium 5.1)
- [CVE-2006-0395](https://insights.sbomify.com/CVE-2006-0395/): Security feature bypass in apple:mac os x (medium 5.1)
- [CVE-2006-0393](https://insights.sbomify.com/CVE-2006-0393/): Denial of service in apple:mac os x (medium 4.0)
- [CVE-2006-0392](https://insights.sbomify.com/CVE-2006-0392/): Memory corruption in apple:mac os x (medium 5.1)
- [CVE-2006-0391](https://insights.sbomify.com/CVE-2006-0391/): Path traversal in apple:mac os x (low 1.7)
- [CVE-2006-0389](https://insights.sbomify.com/CVE-2006-0389/): Cross-site scripting in apple:mac os x (low 2.6)
- [CVE-2006-0388](https://insights.sbomify.com/CVE-2006-0388/): Code injection in apple:mac os x (low 2.6)
- [CVE-2006-0387](https://insights.sbomify.com/CVE-2006-0387/): Memory corruption in apple:mac os x (medium 6.4)
- [CVE-2006-0386](https://insights.sbomify.com/CVE-2006-0386/): Security feature bypass in apple:mac os x (low 1.7)
- [CVE-2006-0384](https://insights.sbomify.com/CVE-2006-0384/): Other in apple:mac os x (high 7.5)
- [CVE-2006-0383](https://insights.sbomify.com/CVE-2006-0383/): Denial of service in apple:mac os x (medium 5.0)
- [CVE-2006-0382](https://insights.sbomify.com/CVE-2006-0382/): Denial of service in apple:mac os x (low 2.1)
- [CVE-2006-0381](https://insights.sbomify.com/CVE-2006-0381/): Denial of service in freebsd:freebsd (medium 5.0)
- [CVE-2006-0380](https://insights.sbomify.com/CVE-2006-0380/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2006-0379](https://insights.sbomify.com/CVE-2006-0379/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2006-0378](https://insights.sbomify.com/CVE-2006-0378/): Cross-site scripting in netrix:x-site manager (medium 4.3)
- [CVE-2006-0377](https://insights.sbomify.com/CVE-2006-0377/): Command injection in squirrelmail:squirrelmail (medium 5.0)
- [CVE-2006-0376](https://insights.sbomify.com/CVE-2006-0376/): Security feature bypass in microsoft:windows 2000 (high 7.5)
- [CVE-2006-0375](https://insights.sbomify.com/CVE-2006-0375/): Hardcoded credentials in advantage century telecommunication:p202s (medium 5.0)
- [CVE-2006-0374](https://insights.sbomify.com/CVE-2006-0374/): Misconfiguration in advantage century telecommunication:p202s (high 7.5)
- [CVE-2006-0373](https://insights.sbomify.com/CVE-2006-0373/): Cross-site scripting in douran:followweb (medium 4.3)
- [CVE-2006-0372](https://insights.sbomify.com/CVE-2006-0372/): SQL injection in insane visions:blogphp (high 7.5)
- [CVE-2006-0371](https://insights.sbomify.com/CVE-2006-0371/): Path traversal in noah medling:rcblog (medium 5.0)
- [CVE-2006-0370](https://insights.sbomify.com/CVE-2006-0370/): Information disclosure in noah medling:rcblog (medium 5.0)
- [CVE-2006-0369](https://insights.sbomify.com/CVE-2006-0369/): Information disclosure in oracle:mysql (low 2.1)
- [CVE-2006-0368](https://insights.sbomify.com/CVE-2006-0368/): Denial of service in cisco:call manager (high 7.8)
- [CVE-2006-0367](https://insights.sbomify.com/CVE-2006-0367/): Privilege escalation in cisco:call manager (medium 6.5)
- [CVE-2006-0366](https://insights.sbomify.com/CVE-2006-0366/): Cross-site scripting in phpclanwebsite:phpclanwebsite (medium 4.3)
- [CVE-2006-0365](https://insights.sbomify.com/CVE-2006-0365/): Cross-site scripting in xmb software:xmb forum (medium 4.3)
- [CVE-2006-0364](https://insights.sbomify.com/CVE-2006-0364/): Cross-site scripting in mybulletinboard:mybulletinboard (medium 4.3)
- [CVE-2006-0363](https://insights.sbomify.com/CVE-2006-0363/): Weak cryptography in microsoft:msn messenger (low 2.1)
- [CVE-2006-0362](https://insights.sbomify.com/CVE-2006-0362/): Denial of service in 3com:tippingpoint ips tos (medium 5.0)
- [CVE-2006-0361](https://insights.sbomify.com/CVE-2006-0361/): Cross-site scripting in bit 5 blog:bit 5 blog (medium 4.3)
- [CVE-2006-0360](https://insights.sbomify.com/CVE-2006-0360/): Information disclosure in mpm:hp-180w voip wifi phone (medium 6.4)
- [CVE-2006-0359](https://insights.sbomify.com/CVE-2006-0359/): Memory corruption in counterpath:eyebeam sip softphone (high 7.5)
- [CVE-2006-0358](https://insights.sbomify.com/CVE-2006-0358/): SQL injection in powerportal:powerportal (high 7.5)
- [CVE-2006-0357](https://insights.sbomify.com/CVE-2006-0357/): Denial of service in grant averett:cerberus ftp server (medium 5.0)
- [CVE-2006-0356](https://insights.sbomify.com/CVE-2006-0356/): Denial of service in ari pikivirta:home ftp server (medium 5.0)
- [CVE-2006-0355](https://insights.sbomify.com/CVE-2006-0355/): Denial of service in helmsman research:homeftp (medium 5.0)
- [CVE-2006-0354](https://insights.sbomify.com/CVE-2006-0354/): Denial of service in cisco:aironet ap1100 (medium 5.5)
- [CVE-2006-0353](https://insights.sbomify.com/CVE-2006-0353/): Information disclosure in gnu:lsh (low 3.6)
- [CVE-2006-0352](https://insights.sbomify.com/CVE-2006-0352/): Information disclosure in fluffington:flog (medium 5.0)
- [CVE-2006-0351](https://insights.sbomify.com/CVE-2006-0351/): Denial of service in don moore:mydns (medium 5.0)
- [CVE-2006-0350](https://insights.sbomify.com/CVE-2006-0350/): Cross-site scripting in epic designs:eggblog (medium 4.3)
- [CVE-2006-0349](https://insights.sbomify.com/CVE-2006-0349/): SQL injection in epic designs:eggblog (high 7.5)
- [CVE-2006-0348](https://insights.sbomify.com/CVE-2006-0348/): Memory corruption in stefan ritt:elog web logbook (medium 5.0)
- [CVE-2006-0347](https://insights.sbomify.com/CVE-2006-0347/): Path traversal in stefan ritt:elog web logbook (medium 5.0)
- [CVE-2006-0346](https://insights.sbomify.com/CVE-2006-0346/): Cross-site scripting in saral kaushik:saralblog (medium 4.3)
- [CVE-2006-0345](https://insights.sbomify.com/CVE-2006-0345/): SQL injection in saral kaushik:saralblog (high 7.5)
- [CVE-2006-0344](https://insights.sbomify.com/CVE-2006-0344/): Path traversal in intervations:filecopa (medium 6.4)
- [CVE-2006-0343](https://insights.sbomify.com/CVE-2006-0343/): Denial of service in hitachi:jpi netsight ii port discovery advance (medium 5.0)
- [CVE-2006-0342](https://insights.sbomify.com/CVE-2006-0342/): Denial of service in rockliffe:mailsite (high 7.8)
- [CVE-2006-0341](https://insights.sbomify.com/CVE-2006-0341/): Cross-site scripting in rockliffe:mailsite (medium 4.3)
- [CVE-2006-0340](https://insights.sbomify.com/CVE-2006-0340/): Denial of service in cisco:ios (high 7.1)
- [CVE-2006-0339](https://insights.sbomify.com/CVE-2006-0339/): Memory corruption in bitcomet:bitcomet (high 7.5)
- [CVE-2006-0338](https://insights.sbomify.com/CVE-2006-0338/): Security feature bypass in f-secure:f-secure anti-virus (medium 5.0)
- [CVE-2006-0337](https://insights.sbomify.com/CVE-2006-0337/): Memory corruption in f-secure:f-secure anti-virus (high 7.5)
- [CVE-2006-0336](https://insights.sbomify.com/CVE-2006-0336/): Denial of service in kerio:winroute firewall (medium 5.0)
- [CVE-2006-0335](https://insights.sbomify.com/CVE-2006-0335/): Denial of service in kerio:winroute firewall (medium 5.0)
- [CVE-2006-0334](https://insights.sbomify.com/CVE-2006-0334/): Cross-site scripting in freekrai.net:my amazon store manager (medium 4.3)
- [CVE-2006-0333](https://insights.sbomify.com/CVE-2006-0333/): Cross-site scripting in ar-blog:ar-blog (medium 4.3)
- [CVE-2006-0332](https://insights.sbomify.com/CVE-2006-0332/): File upload in ecartis:ecartis (medium 6.4)
- [CVE-2006-0331](https://insights.sbomify.com/CVE-2006-0331/): Memory corruption in thiago melo de paula:change passwd (medium 4.6)
- [CVE-2006-0330](https://insights.sbomify.com/CVE-2006-0330/): Cross-site scripting in gallery project:gallery (medium 4.3)
- [CVE-2006-0329](https://insights.sbomify.com/CVE-2006-0329/): SQL injection in hitachi:hitsenser data mart server (high 7.5)
- [CVE-2006-0328](https://insights.sbomify.com/CVE-2006-0328/): Memory corruption in philippe jounin:tftpd32 (medium 5.0)
- [CVE-2006-0327](https://insights.sbomify.com/CVE-2006-0327/): Information disclosure in typo3:typo3 (medium 5.0)
- [CVE-2006-0325](https://insights.sbomify.com/CVE-2006-0325/): Supply chain in etomite:etomite (high 7.5)
- [CVE-2006-0324](https://insights.sbomify.com/CVE-2006-0324/): SQL injection in webspot:webspotblogging (high 7.5)
- [CVE-2006-0323](https://insights.sbomify.com/CVE-2006-0323/): Memory corruption in realnetworks:helix player (critical 9.3)
- [CVE-2006-0322](https://insights.sbomify.com/CVE-2006-0322/): Denial of service in mediawiki:mediawiki (medium 5.0)
- [CVE-2006-0321](https://insights.sbomify.com/CVE-2006-0321/): Memory corruption in fetchmail:fetchmail (medium 5.0)
- [CVE-2006-0320](https://insights.sbomify.com/CVE-2006-0320/): SQL injection in bit 5 blog:bit 5 blog (high 7.5)
- [CVE-2006-0319](https://insights.sbomify.com/CVE-2006-0319/): Path traversal in farmers wife:farmers wife (medium 5.0)
- [CVE-2006-0318](https://insights.sbomify.com/CVE-2006-0318/): SQL injection in insane visions:blogphp (high 7.5)
- [CVE-2006-0317](https://insights.sbomify.com/CVE-2006-0317/): Cross-site scripting in redkernel:referrer tracker (medium 4.3)
- [CVE-2006-0316](https://insights.sbomify.com/CVE-2006-0316/): Memory corruption in aol:aol client software (critical 10.0)
- [CVE-2006-0315](https://insights.sbomify.com/CVE-2006-0315/): Path traversal in indexcor:ezdatabase (medium 5.8)
- [CVE-2006-0314](https://insights.sbomify.com/CVE-2006-0314/): Information disclosure in pdfdirectory:pdfdirectory (high 7.5)
- [CVE-2006-0313](https://insights.sbomify.com/CVE-2006-0313/): SQL injection in pdfdirectory:pdfdirectory (high 7.5)
- [CVE-2006-0312](https://insights.sbomify.com/CVE-2006-0312/): Auth bypass in mike helton:aoblogger (medium 5.0)
- [CVE-2006-0311](https://insights.sbomify.com/CVE-2006-0311/): SQL injection in mike helton:aoblogger (high 7.5)
- [CVE-2006-0310](https://insights.sbomify.com/CVE-2006-0310/): Cross-site scripting in mike helton:aoblogger (medium 4.3)
- [CVE-2006-0309](https://insights.sbomify.com/CVE-2006-0309/): Denial of service in linksys:befvp41 (medium 4.0)
- [CVE-2006-0308](https://insights.sbomify.com/CVE-2006-0308/): Code injection in htmltonuke:htmltonuke (high 7.5)
- [CVE-2006-0307](https://insights.sbomify.com/CVE-2006-0307/): Denial of service in broadcom:brightstor arcserve backup laptops desktops (medium 5.0)
- [CVE-2006-0306](https://insights.sbomify.com/CVE-2006-0306/): Denial of service in broadcom:brightstor arcserve backup laptops desktops (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/67/