CVEs published in February 2006
448 vulnerabilities, 15 critical, 0 exploited.
- ca messagingComputer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build...5.0 Medium
- mozilla firefox, seamonkey +1 moreThe XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0...5.1 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey...7.5 High
- mozilla firefoxThe function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause...7.5 High
- mozilla firefox, mozilla +1 moreThe Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly...7.5 High
- gnome evolutionThe cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows...5.0 Medium
- isc bindBIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain...7.5 High
- aol client softwareThe default configuration of the America Online (AOL) client software allows all users to modify...7.2 High
- adobe illustrator, photoshop, acrobat +6 more +8 moreMultiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help...4.6 Medium
- ashwebstudio ashnewsCross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows...4.3 Medium
- mybulletinboardSQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute...7.5 High
- symantec sygate management serverSQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server ...7.5 High
- browsercrmCross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to...4.3 Medium
- dragoran portal moduleSQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB...7.5 High
- spipSPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain...5.0 Medium
- spipCross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha...4.3 Medium
- spipMultiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e...7.5 High
- sun solarisUnspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in...2.1 Low
- padl software migrationtoolsPADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite...2.1 Low
- freebsdSelective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming...5.0 Medium
- blackboard, blackboard academic suite +1 more** DISPUTED ** Blackboard Academic Suite 6.0 and earlier does not properly clear session...4.3 Medium
- daffodil software crmSQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to...7.5 High
- cerberus helpdeskMultiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly...4.3 Medium
- easy cms cmsEasy CMS stores the images directory under the web document root with insufficient access control...5.0 Medium
- easy cms cmsMultiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject...4.3 Medium
- nuked-klanCross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers...4.3 Medium
- zbattle.net zbattle clientzbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial...5.0 Medium
- mailenable enterpriseUnspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to...5.0 Medium
- mailenable professionalIMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a...5.0 Medium
- farsinewsPHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with...7.5 High
- punctweb myco guestbookCross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject...4.3 Medium
- punctweb myco guestbookMyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient...7.5 High
- yourboard rlinkCross-site scripting (XSS) vulnerability in rlink.php in Rlink 1.0.0 module for phpBB allows...4.3 Medium
- php gen genMultiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.4 allow remote attackers...4.3 Medium
- php gen genMultiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject...7.5 High
- mozilla firefox, mozilla +1 moreCross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox...4.3 Medium
- mybulletinboardCross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in...4.3 Medium
- mybulletinboardDirectory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB...4.3 Medium
- thomas rybak mg2Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote...4.3 Medium
- vincent hor calendarixMultiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary...7.5 High
- subzane szusermgntSQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to...7.5 High
- aspthai.net aspthai forumsSQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows...7.5 High
- khaled mardam-bey mirc** DISPUTED ** Buffer overflow in the font command of mIRC, probably 6.16, allows local users to...4.6 Medium
- microsoft windows 2000, windows xp, windows 2003 server +2 moreThe VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000,...2.1 Low
- tumbleweed mailgate email firewallMultiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote...5.0 Medium
- cisco iosCertain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12...4.6 Medium
- cisco iosThe TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and...4.6 Medium