CVEs published in May 2006

582 vulnerabilities, 14 critical, 1 exploited.

• secure elements c5 enterprise vulnerability management Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2... CVE-2006-2717 4.0 MediumMay 31, 2006
• secure elements c5 enterprise vulnerability management Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and... CVE-2006-2716 7.5 HighMay 31, 2006
• secure elements c5 enterprise vulnerability management The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not... CVE-2006-2715 7.5 HighMay 31, 2006
• secure elements c5 enterprise vulnerability management Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an... CVE-2006-2714 5.0 MediumMay 31, 2006
• secure elements c5 enterprise vulnerability management Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which... CVE-2006-2713 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the... CVE-2006-2712 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases,... CVE-2006-2711 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all... CVE-2006-2710 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a... CVE-2006-2709 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read... CVE-2006-2708 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer... CVE-2006-2707 5.0 MediumMay 31, 2006
• secure elements class 5 enterprise vulnerability management Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a... CVE-2006-2706 5.0 MediumMay 31, 2006
• secure elements c5 enterprise vulnerability management Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an... CVE-2006-2705 5.0 MediumMay 31, 2006
• secure elements c5 enterprise vulnerability management Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in... CVE-2006-2704 5.0 MediumMay 31, 2006
• wordpress vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof... CVE-2006-2702 Fix available 5.0 MediumMay 31, 2006
• geeklog SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute... CVE-2006-2701 7.5 HighMay 31, 2006
• geeklog SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote... CVE-2006-2700 5.1 MediumMay 31, 2006
• geeklog Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows... CVE-2006-2699 Public exploit 6.8 MediumMay 31, 2006
• geeklog Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a... CVE-2006-2698 7.8 HighMay 31, 2006
• easy-content forums forums Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to... CVE-2006-2697 Public exploit 6.4 MediumMay 31, 2006
• easy-content forums forums Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to... CVE-2006-2696 Public exploit 6.8 MediumMay 31, 2006
• dgnews admin/upprocess.php in DGNews 1.5 and earlier allows remote attackers to execute arbitrary code... CVE-2006-2695 5.1 MediumMay 31, 2006
• scriptscenter ezupload pro Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to... CVE-2006-2694 7.5 HighMay 31, 2006
• nivisec hacks list Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and... CVE-2006-2693 7.1 HighMay 31, 2006
• amule Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to... CVE-2006-2692 Fix available 5.0 MediumMay 31, 2006
• amule Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote... CVE-2006-2691 Fix available 5.0 MediumMay 31, 2006
• eva-web An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers... CVE-2006-2690 7.8 HighMay 31, 2006
• eva-web Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote... CVE-2006-2689 Public exploit 6.8 MediumMay 31, 2006
• achievo SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and... CVE-2006-2688 6.4 MediumMay 31, 2006
• agtc websolutions php-agtc membership system Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and... CVE-2006-2687 4.9 MediumMay 31, 2006
• actionapps PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute... CVE-2006-2686 Public exploit EPSS 13.6% 6.4 MediumMay 31, 2006
• kevin johnson basic analysis and security engine PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and... CVE-2006-2685 Public exploit EPSS 49.2% 4.0 MediumMay 31, 2006
• hotwebscripts cms mundo Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote... CVE-2006-2684 5.8 MediumMay 31, 2006
• open-medium cms PHP remote file inclusion vulnerability in 404.php in open-medium.CMS 0.25 allows remote... CVE-2006-2683 Public exploit 6.4 MediumMay 31, 2006
• back-end cms PHP remote file inclusion vulnerability in BE_config.php in Back-End CMS 0.7.2.1 and earlier... CVE-2006-2682 Public exploit 6.4 MediumMay 31, 2006
• socketmail PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when... CVE-2006-2681 Public exploit 6.8 MediumMay 31, 2006
• php4script az photo album script pro Cross-site scripting (XSS) vulnerability in index.php in AZ Photo Album Script Pro allows remote... CVE-2006-2680 Public exploit 5.8 MediumMay 31, 2006
• cisco vpn client Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the... CVE-2006-2679 7.2 HighMay 31, 2006
• pre projects news manager Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote... CVE-2006-2678 5.8 MediumMay 31, 2006
• sitescape forum SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web... CVE-2006-2677 5.0 MediumMay 31, 2006
• sitescape forum Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different... CVE-2006-2676 5.0 MediumMay 31, 2006
• weonlydo sftp The WeOnlyDo! SFTP (wodSFTP) ActiveX control is marked as safe for scripting, which allows remote... CVE-2006-1175 4.0 MediumMay 31, 2006
• typespeed Buffer overflow in the addnewword function in typespeed 0.4.4 and earlier might allow remote... CVE-2006-1515 Fix available 7.5 HighMay 31, 2006
• ubbcentral ubb.threads PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote... CVE-2006-2675 Public exploit 5.1 MediumMay 30, 2006
• tamber forum forum Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers... CVE-2006-2674 7.5 HighMay 30, 2006
• e-board elite-board Cross-site scripting (XSS) vulnerability in search.html in Bulletin Board Elite-Board (E-Board) 1... CVE-2006-2673 6.8 MediumMay 30, 2006
• interquest internet services realty pro one Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to... CVE-2006-2672 6.8 MediumMay 30, 2006
• calendarscripts.com chatpat SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL... CVE-2006-2671 5.0 MediumMay 30, 2006
• calendarscripts.com chatpat Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to... CVE-2006-2670 5.8 MediumMay 30, 2006
• preprojects.com pre shopping mall Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote... CVE-2006-2669 4.3 MediumMay 30, 2006
• Show olderLoading…