CVEs published in February 2006
448 vulnerabilities, 15 critical, 0 exploited.
- unu networks mailgust U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request... 5.0 Medium
- free host shop website generator Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative... 6.5 Medium
- microsoft word Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via... 2.6 Low
- limbo cms cms Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to... 4.3 Medium
- phpx Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject... 4.3 Medium
- pear archive zip Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote... 5.0 Medium
- pear archive tar PEAR::Archive_Tar Directory Traversal vulnerability 5.0 Medium
- argosoft mail server Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote... 4.0 Medium
- argosoft mail server Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows... 4.0 Medium
- argosoft mail server The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive... 5.0 Medium
- jgs-xa jgs-gallery addon, woltlab burning board +1 more Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and... 2.6 Low
- smithmicro stuffit expander, stuffit standard, zipmagic deluxe +1 more +3 more Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic... 2.6 Low
- alt-n mdaemon Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4... 5.0 Medium
- brown bear software ical Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to... 4.3 Medium
- myphpnuke Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow... 4.3 Medium
- devellion cubecart CubeCart 3.0 through 3.6 does not properly check authorization for an administration session... 5.0 Medium
- fckeditor Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in... 6.4 Medium
- oi email marketing system Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a... 1.7 Low
- oi email marketing system SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 ... 7.5 High
- ritlabs the bat Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via... 7.5 High
- melange chat system Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies... 2.1 Low
- mozilla bugzilla Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a... 7.5 High
- mozilla bugzilla Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2)... 7.5 High
- mozilla bugzilla Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in... 5.5 Medium
- mozilla bugzilla SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows... 5.5 Medium
- oreka Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a ... 5.0 Medium
- ipswitch whatsup NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of... 5.0 Medium
- invision power services power board Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents... 5.0 Medium
- invision power services power board Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive... 5.0 Medium
- francisco burzi php-nuke PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms... 7.5 High
- francisco burzi php-nuke SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute... 7.5 High
- top line d3jeeb pro SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL... 7.5 High
- mysql MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that... 4.6 Medium
- novell linux desktop, open enterprise server +1 more Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux... 10.0 High
- sun solaris, sunos +1 more Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified... 7.2 High
- freebsd nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS... 7.8 High
- 4images image gallery management system Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote... 7.5 High
- gnome gpdf, libextractor, xpdf +1 more +3 more Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products... 7.6 High
- lincoln d. stein crypt cbc Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization... 2.6 Low
- virtual communication services vpmi enterprise ** DISPUTED ** SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi)... 7.5 High
- simple machines forum Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1... 4.3 Medium
- nocc NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to... 5.0 Medium
- nocc Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to... 4.3 Medium
- nocc NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to ... 5.0 Medium
- nocc NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which... 7.5 High
- nocc Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to... 5.0 Medium
- speedproject speedcommander, squeez, zipstar +2 more Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2)... 5.0 Medium
- brown bear software calcium Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject... 4.3 Medium
- invision power services power board index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote... 2.6 Low
- phplib team phplib Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index... 7.5 High
- Show olderLoading…