CVEs published in May 2006
582 vulnerabilities, 14 critical, 1 exploited.
- limbo cms cmsPHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier...6.4 Medium
- collaborative portal server project portal serverCross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4...4.3 Medium
- orbitscripts orbithyipMultiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote...5.8 Medium
- wilsonncareabusinesses php newsfeedMultiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute...6.4 Medium
- neomailCross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to...4.3 Medium
- openphpnukePHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows...7.5 High
- aznewsSQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary...7.5 High
- ruperts news newsSQL injection vulnerability in login.php in Ruperts News allows remote attackers to execute...7.5 High
- phpbb group phpbbPHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for...5.1 Medium
- jsboardCross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in...6.8 Medium
- boonex barracudaSQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote...7.5 High
- duware duclassifiedSQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute...6.4 Medium
- advanced poll pollinclude/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP...5.0 Medium
- advanced poll pollSQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote...5.1 Medium
- deltascripts pro publishDirect static code injection vulnerability in Pro Publish 2.0 allows remote authenticated...5.5 Medium
- deltascripts pro publishMultiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute...7.5 High
- blog mod modSQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to...6.4 Medium
- avalon ltd maxtradeSQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote...6.4 Medium
- turnkey solutions sunshop shopping cartMultiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote...5.8 Medium
- network administration visualized administration visualizedMultiple SQL injection vulnerabilities in the report interface in Network Administration...6.4 Medium
- coolmenusPHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to...6.8 Medium
- i-rater platinumPHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows...5.0 Medium
- libtiffThe TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of...2.1 Low
- artmedic webdesign eventPHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote...5.0 Medium
- jmk web scripts picture galleryJMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to...7.5 High
- extrosoft thymeCross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary...4.3 Medium
- planet concept planetgalleryplanetGallery allows remote attackers to gain administrator privileges via a direct request to...7.5 High
- sws simple web serverFormat string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary...7.5 High
- sws simple web serverBuffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a...7.5 High
- microsoft outlook expressA component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions...4.3 Medium
- virtual private server vserverVirtual Private Server (Vserver) 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides...2.1 Low
- clam anti-virus clamavBuffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0...5.1 Medium