Ruben Santamarta Microsoft Windows - 'Csrss.exe/winsrv.dll' NtRaiseHardError Double-Free
dos windows CVE-2006-6797

Kacper IMGallery 2.5 - Create Uploader Script
webapps php OSVDB-37556;CVE-2007-0082

bd0rk FreeStyle Wiki 3.6.2 - 'user.dat' Password Disclosure
webapps php OSVDB-37552;CVE-2006-6889

Inge Henriksen SoftArtisans SAFileUp 5.0.14 - 'viewsrc.asp' Script Source Disclosure
webapps asp OSVDB-33347;CVE-2006-6865

rgod Cacti 0.8.6i - 'copy_cacti_user.php' SQL Injection Create Admin
webapps php

bd0rk Voodoo chat 1.0RC1b - 'users.dat' Password Disclosure
webapps php OSVDB-37551;CVE-2006-6890

bd0rk x-news 1.1 - 'users.txt' Remote Password Disclosure
webapps php CVE-2002-1656

viP HaCKEr Mobilelib Gold - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2006-6851;OSVDB-34805

bd0rk EasyNews PRO News Publishing 4.0 - Password Disclosure
webapps php OSVDB-32540;CVE-2006-6866

rgod Durian Web Application Server 3.02 - Denial of Service
dos windows OSVDB-33442;CVE-2006-6853

rgod Durian Web Application Server 3.02 - Remote Buffer Overflow
remote windows 4002 OSVDB-33442;CVE-2006-6853

Kacper WebText 0.4.5.2 - Remote Code Execution
webapps php OSVDB-32508;CVE-2006-6856

the master phpBB2 Plus 1.53 - Acronym Mod SQL Injection
webapps php OSVDB-35444;CVE-2006-6842

Critical Security DB Hub 0.3 - Remote Denial of Service
dos multiple CVE-2006-6810;OSVDB-32502

David Kierznowski WordPress Core 1.x/2.0.x - 'template.php' HTML Injection
webapps php CVE-2006-6808;OSVDB-31578

rgod Cacti 0.8.6i - 'cmd.php?popen()' Remote Injection
webapps php