# Vulnerabilities published in 2006


- [CVE-2006-0204](https://insights.sbomify.com/CVE-2006-0204/): Cross-site scripting in wordcircle:wordcircle (medium 4.3)
- [CVE-2006-0203](https://insights.sbomify.com/CVE-2006-0203/): Business logic in mini-nuke:cms system (medium 5.0)
- [CVE-2006-0202](https://insights.sbomify.com/CVE-2006-0202/): Misconfiguration in paypal:php toolkit (low 3.6)
- [CVE-2006-0201](https://insights.sbomify.com/CVE-2006-0201/): Business logic in paypal:php toolkit (medium 5.0)
- [CVE-2006-0200](https://insights.sbomify.com/CVE-2006-0200/): Memory corruption in php:php (critical 9.3)
- [CVE-2006-0199](https://insights.sbomify.com/CVE-2006-0199/): SQL injection in mini-nuke:cms system (high 7.5)
- [CVE-2006-0198](https://insights.sbomify.com/CVE-2006-0198/): Cross-site scripting in xoops:xoops pool module (medium 4.3)
- [CVE-2006-0197](https://insights.sbomify.com/CVE-2006-0197/): Memory corruption in x.org:x.org (medium 5.0)
- [CVE-2006-0196](https://insights.sbomify.com/CVE-2006-0196/): Memory corruption in serial line sniffer:serial line sniffer (medium 4.6)
- [CVE-2006-0195](https://insights.sbomify.com/CVE-2006-0195/): Cross-site scripting in squirrelmail:squirrelmail (medium 4.3)
- [CVE-2006-0194](https://insights.sbomify.com/CVE-2006-0194/): Cross-site scripting in fog creek software:fogbugz (medium 4.3)
- [CVE-2006-0193](https://insights.sbomify.com/CVE-2006-0193/): Cross-site scripting in positive software:h-sphere (medium 4.3)
- [CVE-2006-0192](https://insights.sbomify.com/CVE-2006-0192/): SQL injection in philip loftin:aspsurvey (high 7.5)
- [CVE-2006-0191](https://insights.sbomify.com/CVE-2006-0191/): Null dereference in sun:solaris (medium 4.9)
- [CVE-2006-0190](https://insights.sbomify.com/CVE-2006-0190/): Privilege escalation in sun:solaris (high 7.2)
- [CVE-2006-0189](https://insights.sbomify.com/CVE-2006-0189/): Memory corruption in estara:softphone (high 7.5)
- [CVE-2006-0188](https://insights.sbomify.com/CVE-2006-0188/): Other in squirrelmail:squirrelmail (medium 4.3)
- [CVE-2006-0187](https://insights.sbomify.com/CVE-2006-0187/): Code injection in microsoft:visual studio .net (medium 5.1)
- [CVE-2006-0185](https://insights.sbomify.com/CVE-2006-0185/): Cross-site scripting in php-nuke:news module (medium 5.0)
- [CVE-2006-0184](https://insights.sbomify.com/CVE-2006-0184/): SQL injection in mainenet enterprises:asptopsites (high 7.5)
- [CVE-2006-0183](https://insights.sbomify.com/CVE-2006-0183/): Code injection in acal:calendar project (medium 6.5)
- [CVE-2006-0182](https://insights.sbomify.com/CVE-2006-0182/): Auth bypass in acal:calendar project (high 7.5)
- [CVE-2006-0181](https://insights.sbomify.com/CVE-2006-0181/): Hardcoded credentials in cisco:cs-mars (high 7.2)
- [CVE-2006-0180](https://insights.sbomify.com/CVE-2006-0180/): Cross-site scripting in calogic:calogic calendars (medium 4.3)
- [CVE-2006-0179](https://insights.sbomify.com/CVE-2006-0179/): Denial of service in cisco:ip phone 7940 (medium 5.0)
- [CVE-2006-0178](https://insights.sbomify.com/CVE-2006-0178/): Memory corruption in cray:unicos (high 7.2)
- [CVE-2006-0177](https://insights.sbomify.com/CVE-2006-0177/): Memory corruption in cray:unicos (high 7.2)
- [CVE-2006-0176](https://insights.sbomify.com/CVE-2006-0176/): Memory corruption in xmame:xmame (high 7.2)
- [CVE-2006-0175](https://insights.sbomify.com/CVE-2006-0175/): Cross-site scripting in webwiz:web wiz forums (medium 4.3)
- [CVE-2006-0174](https://insights.sbomify.com/CVE-2006-0174/): Information disclosure in hummingbird:collaboration (medium 4.0)
- [CVE-2006-0173](https://insights.sbomify.com/CVE-2006-0173/): Other in hummingbird:enterprise collaboration (medium 4.0)
- [CVE-2006-0172](https://insights.sbomify.com/CVE-2006-0172/): Cross-site scripting in hummingbird:enterprise collaboration (low 3.5)
- [CVE-2006-0171](https://insights.sbomify.com/CVE-2006-0171/): Code injection in orjinweb:orjinweb e-commerce (high 7.5)
- [CVE-2006-0169](https://insights.sbomify.com/CVE-2006-0169/): File upload in myphpim:myphpim (high 7.5)
- [CVE-2006-0168](https://insights.sbomify.com/CVE-2006-0168/): Cross-site scripting in myphpim:myphpim (medium 4.3)
- [CVE-2006-0167](https://insights.sbomify.com/CVE-2006-0167/): SQL injection in myphpim:myphpim (high 7.5)
- [CVE-2006-0166](https://insights.sbomify.com/CVE-2006-0166/): Security feature bypass in symantec:norton system works (high 7.5)
- [CVE-2006-0165](https://insights.sbomify.com/CVE-2006-0165/): Cross-site scripting in plain black:webgui (medium 4.3)
- [CVE-2006-0164](https://insights.sbomify.com/CVE-2006-0164/): Code injection in woah-projekt:phgstats (high 7.5)
- [CVE-2006-0163](https://insights.sbomify.com/CVE-2006-0163/): SQL injection in francisco burzi:php-nuke ev (high 7.5)
- [CVE-2006-0162](https://insights.sbomify.com/CVE-2006-0162/): Memory corruption in clam anti-virus:clamav (high 7.5)
- [CVE-2006-0161](https://insights.sbomify.com/CVE-2006-0161/): Other in sun:solaris (medium 4.6)
- [CVE-2006-0160](https://insights.sbomify.com/CVE-2006-0160/): SQL injection in venom board:venom board (high 7.5)
- [CVE-2006-0159](https://insights.sbomify.com/CVE-2006-0159/): SQL injection in javier suarez sanz:foro domus (high 7.5)
- [CVE-2006-0158](https://insights.sbomify.com/CVE-2006-0158/): SQL injection in cyberdoc:sitesuite cms (high 7.5)
- [CVE-2006-0157](https://insights.sbomify.com/CVE-2006-0157/): Business logic in reamday enterprises:magic news plus (medium 5.0)
- [CVE-2006-0156](https://insights.sbomify.com/CVE-2006-0156/): Cross-site scripting in foxrum:foxrum (medium 4.3)
- [CVE-2006-0155](https://insights.sbomify.com/CVE-2006-0155/): Cross-site scripting in 427bb:fourtwosevenbb (medium 4.3)
- [CVE-2006-0154](https://insights.sbomify.com/CVE-2006-0154/): SQL injection in 427bb:fourtwosevenbb (high 7.5)
- [CVE-2006-0153](https://insights.sbomify.com/CVE-2006-0153/): Auth bypass in 427bb:fourtwosevenbb (high 7.5)
- [CVE-2006-0152](https://insights.sbomify.com/CVE-2006-0152/): Cross-site scripting in phpchamber:phpchamber (medium 4.3)
- [CVE-2006-0151](https://insights.sbomify.com/CVE-2006-0151/): Privilege escalation in todd miller:sudo (high 7.2)
- [CVE-2006-0150](https://insights.sbomify.com/CVE-2006-0150/): Memory corruption in dave carrigan:auth ldap (high 7.5)
- [CVE-2006-0149](https://insights.sbomify.com/CVE-2006-0149/): Cross-site scripting in simpbook:simpbook (medium 6.1)
- [CVE-2006-0148](https://insights.sbomify.com/CVE-2006-0148/): Denial of service in netsarang:xlpd (medium 5.0)
- [CVE-2006-0147](https://insights.sbomify.com/CVE-2006-0147/): Code injection in john lim:adodb (high 7.5)
- [CVE-2006-0146](https://insights.sbomify.com/CVE-2006-0146/): SQL injection in john lim:adodb (high 7.5)
- [CVE-2006-0145](https://insights.sbomify.com/CVE-2006-0145/): Integer overflow in netbsd:netbsd (medium 4.6)
- [CVE-2006-0144](https://insights.sbomify.com/CVE-2006-0144/): Code injection in apache2triad:apache2triad (high 7.5)
- [CVE-2006-0143](https://insights.sbomify.com/CVE-2006-0143/): Memory corruption in microsoft:windows 2000 (high 7.5)
- [CVE-2006-0142](https://insights.sbomify.com/CVE-2006-0142/): Cross-site scripting in andromeda software:andromeda (medium 4.3)
- [CVE-2006-0141](https://insights.sbomify.com/CVE-2006-0141/): Denial of service in eudora:internet mail server (medium 5.0)
- [CVE-2006-0140](https://insights.sbomify.com/CVE-2006-0140/): Cross-site scripting in navboard:navboard (medium 4.3)
- [CVE-2006-0139](https://insights.sbomify.com/CVE-2006-0139/): Missing authorization in pd9 software:megabbs (medium 5.0)
- [CVE-2006-0138](https://insights.sbomify.com/CVE-2006-0138/): Denial of service in amsn:amsn (medium 5.0)
- [CVE-2006-0137](https://insights.sbomify.com/CVE-2006-0137/): SQL injection in phanatic softwares:chimera web portal (high 7.5)
- [CVE-2006-0136](https://insights.sbomify.com/CVE-2006-0136/): Cross-site scripting in phanatic softwares:chimera web portal (medium 4.3)
- [CVE-2006-0135](https://insights.sbomify.com/CVE-2006-0135/): SQL injection in thewebforum:thewebforum (high 7.5)
- [CVE-2006-0134](https://insights.sbomify.com/CVE-2006-0134/): Cross-site scripting in thewebforum:thewebforum (medium 4.3)
- [CVE-2006-0133](https://insights.sbomify.com/CVE-2006-0133/): Path traversal in ibm:aix (low 3.6)
- [CVE-2006-0132](https://insights.sbomify.com/CVE-2006-0132/): Path traversal in webftp:webftp (medium 5.0)
- [CVE-2006-0131](https://insights.sbomify.com/CVE-2006-0131/): Information disclosure in boastmachine:boastmachine (medium 5.0)
- [CVE-2006-0130](https://insights.sbomify.com/CVE-2006-0130/): Auth bypass in rockliffe:mailsite (high 7.5)
- [CVE-2006-0129](https://insights.sbomify.com/CVE-2006-0129/): Information disclosure in rockliffe:mailsite (medium 5.0)
- [CVE-2006-0128](https://insights.sbomify.com/CVE-2006-0128/): Memory corruption in rockliffe:mailsite (critical 10.0)
- [CVE-2006-0127](https://insights.sbomify.com/CVE-2006-0127/): Path traversal in rockliffe:mailsite (medium 4.0)
- [CVE-2006-0126](https://insights.sbomify.com/CVE-2006-0126/): Misconfiguration in rxvt-unicode:rxvt-unicode (medium 4.6)
- [CVE-2006-0125](https://insights.sbomify.com/CVE-2006-0125/): Code injection in appserv open project:appserv (medium 5.0)
- [CVE-2006-0124](https://insights.sbomify.com/CVE-2006-0124/): Cross-site scripting in adn forum:adn forum (medium 4.3)
- [CVE-2006-0123](https://insights.sbomify.com/CVE-2006-0123/): SQL injection in adn forum:adn forum (high 7.5)
- [CVE-2006-0122](https://insights.sbomify.com/CVE-2006-0122/): Cross-site scripting in aquifer cms:aquifer cms (medium 4.3)
- [CVE-2006-0121](https://insights.sbomify.com/CVE-2006-0121/): Denial of service in ibm:lotus domino (high 7.8)
- [CVE-2006-0120](https://insights.sbomify.com/CVE-2006-0120/): Denial of service in ibm:lotus domino (medium 5.0)
- [CVE-2006-0119](https://insights.sbomify.com/CVE-2006-0119/): Denial of service in ibm:lotus domino (critical 10.0)
- [CVE-2006-0118](https://insights.sbomify.com/CVE-2006-0118/): Denial of service in ibm:lotus domino (medium 5.0)
- [CVE-2006-0117](https://insights.sbomify.com/CVE-2006-0117/): Memory corruption in ibm:lotus domino (medium 5.0)
- [CVE-2006-0116](https://insights.sbomify.com/CVE-2006-0116/): Cross-site scripting in inetstore:inetstore online (medium 5.0)
- [CVE-2006-0115](https://insights.sbomify.com/CVE-2006-0115/): SQL injection in oneplug solutions:oneplug cms (high 7.5)
- [CVE-2006-0114](https://insights.sbomify.com/CVE-2006-0114/): Missing authorization in joomla:joomla (medium 5.0)
- [CVE-2006-0113](https://insights.sbomify.com/CVE-2006-0113/): Information disclosure in enhanced simple php gallery:enhanced simple php gallery (medium 5.0)
- [CVE-2006-0112](https://insights.sbomify.com/CVE-2006-0112/): Cross-site scripting in enhanced simple php gallery:enhanced simple php gallery (medium 4.3)
- [CVE-2006-0111](https://insights.sbomify.com/CVE-2006-0111/): Cross-site scripting in boxcar media:shopping cart (medium 5.0)
- [CVE-2006-0110](https://insights.sbomify.com/CVE-2006-0110/): Cross-site scripting in javier suarez sanz:foro domus (medium 4.3)
- [CVE-2006-0109](https://insights.sbomify.com/CVE-2006-0109/): Cross-site scripting in modular merchant:shopping cart (medium 5.0)
- [CVE-2006-0108](https://insights.sbomify.com/CVE-2006-0108/): SQL injection in idea development id oy:timecan cms (high 7.5)
- [CVE-2006-0107](https://insights.sbomify.com/CVE-2006-0107/): SQL injection in idea development id oy:timecan cms (high 7.5)
- [CVE-2006-0106](https://insights.sbomify.com/CVE-2006-0106/): Code injection in wine:wine (high 7.5)
- [CVE-2006-0105](https://insights.sbomify.com/CVE-2006-0105/): Denial of service in postgresql:postgresql (medium 5.0)
- [CVE-2006-0104](https://insights.sbomify.com/CVE-2006-0104/): Path traversal in ralph capper:tinyphpforum (medium 5.0)
- [CVE-2006-0103](https://insights.sbomify.com/CVE-2006-0103/): Information disclosure in ralph capper:tinyphpforum (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/69/