month report
May 2006
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
May 2006 closed with 627 published CVEs. 15 criticals, apple led volume, mostly via mac os x. Biggest breakout: novell inc. at ×5.0 their 12-month median. Top weakness class — CWE-119 (14 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
627
— MoM— YoY
Severity mix
15 / 156
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.6%
4 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
7225.6
n=4
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
5863
n=1
Detection gap
KEV pressure, no Nuclei coverage
May 2006 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft8 CVE
Weakness × Vendor
What's spreading where in May 2006
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
119Memory Buffer Bounds79XSS94Code Injection89SQL Injection200Information Exposure189CWE-189264CWE-264134Format String20Improper Input Validation287Improper Authenticationapple613linux12secure elementssun11beaibm1novell inc.12ipswitch111microsoft21alstrasoft1phpbb group1сообщество свободного программного обеспечения
Most discussed CVEs — May 2006
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
- 5.0×novell inc.10 CVE
- 5.0×invision power services5 CVE
- 3.5×alstrasoft7 CVE
- 3.0×caucho technology3 CVE
- 3.0×dokeos3 CVE
- 3.0×e1073 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #3secure elements14 CVE
- #14greg donald6 CVE
- #16ideal science5 CVE
- #19raydium5 CVE
- #20bitrix4 CVE
- #21geeklog4 CVE
- #23lksctp4 CVE
- #26outgun4 CVE
- #27russcom network4 CVE
- #28smartisoft4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 31 CVECVSS 5.3PoC 2mac os x (20) · quicktime (11) · mac os x server (4)
- 18 CVE1 critCVSS 4.9linux kernel (18)
- 14 CVECVSS 5.3NEWc5 enterprise vulnerability management (7) · class 5 enterprise vulnerability management (7)
- 13 CVECVSS 5.6PoC 2sunos (3) · java system application server (3) · jre (2)
- 11 CVECVSS 5.0weblogic server (11)
- 10 CVE3 critCVSS 7.5websphere application server (9) · aix (1)
- 10 CVE1 critCVSS 5.2×5.0PoC 1opensuse (10)
- 8 CVECVSS 5.1PoC 3whatsup professional (7) · whatsup (1)
- 8 CVE1 critCVSS 6.1KEV 1PoC 2windows 2000 (3) · windows xp (3) · windows nt (2)
- 7 CVECVSS 5.4×3.5article manager pro (3) · webhost directory (3) · e-friends (1)
- 7 CVECVSS 6.4PoC 3phpbb (3) · phpbb toplist (2) · phpbb advanced guestbook (1)
- 7 CVECVSS 4.4PoC 1debian gnu/linux (7)
- 6 CVECVSS 5.7PoC 1unity express (2) · ip phone 7905 (1) · ip phone 7912 (1)
- 6 CVECVSS 5.7NEWdestiney links script (4) · destiney rated images script (2)
- 5 CVECVSS 4.9PoC 3gentoo linux (5)
- 5 CVECVSS 5.9NEWPoC 1idealbb (5)
- 5 CVECVSS 6.4×5.0invision power board (3) · invision gallery (1) · invision community blog (1)
- 5 CVE2 critCVSS 7.1client (2) · netware (2) · imonitor (1)
- 5 CVECVSS 5.9NEWraydium (5)
- 4 CVECVSS 5.0NEWNuclei 1PoC 2bitrix site manager (4)
- 4 CVECVSS 6.8NEWPoC 3geeklog (4)
- 4 CVECVSS 6.1hp-ux (2) · openview network node manager (1) · openview storage data protector (1)
- 4 CVECVSS 7.0NEWstream control transmission protocol (3) · lksctp (1)
- 4 CVECVSS 3.6PoC 1firefox (3) · bugzilla (1) · mozilla suite (1)
- 4 CVECVSS 5.0PoC 1mysql (3) · database server (1)
- 4 CVECVSS 7.0NEWPoC 1outgun (4)
- 4 CVECVSS 5.5NEWloginphp (2) · phpimages (1) · russcom.ping (1)
- 4 CVECVSS 6.6NEWPoC 2phpbazar (2) · phplistpro (2)
- 3 CVECVSS 5.1artmedic newsletter (2) · artmedic event (1)
- 3 CVECVSS 5.9NEW×3.0PoC 1resin (3)
- 3 CVECVSS 6.4NEW×3.0PoC 2dokeos (2) · dokeos community release (1) · open source learning and knowledge management tool (1)
- 3 CVECVSS 5.5×3.0e107 (3)
- 3 CVECVSS 6.4retrospect (2) · retrospect client (1)
- 3 CVECVSS 5.8NEWfreetype (3)
- 3 CVECVSS 5.4NEWmyweb portal office (1) · netshelter fw (1) · netshelter fw-l (1)
- 3 CVECVSS 5.0bind (3)
- 3 CVECVSS 6.4PoC 1mybulletinboard (3)
- 3 CVECVSS 5.5mysql (3)
- 3 CVECVSS 4.8NEWe-business designer (3)
- 3 CVECVSS 6.4PoC 1php fusion (3)
- 3 CVECVSS 5.0NEWPoC 3quagga (2) · quagga routing software suite (1)
- 3 CVECVSS 4.3NEWxtreme topsites (3)
- 3 CVE1 critCVSS 7.2NEWyapig (3)
- 3 CVECVSS 6.9NEWPoC 1short url and url tracker script (2) · stylish text ads script (1)
- 2 CVECVSS 5.4NEWPoC 1php-gallery (2)
- 2 CVECVSS 5.0NEWadvanced poll (2)
- 2 CVECVSS 5.3NEWPoC 2albinator (2)
- 2 CVECVSS 5.0NEWamule (2)
- 2 CVECVSS 3.8NEWbytehoard (2)
- 2 CVECVSS 5.7NEWPoC 1angelinecms (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | apple | 31 | · | · | · | PoC 2 | mac os x (20) · quicktime (11) · mac os x server (4) | — | |
| 2 | linux | 18 | 1 | · | · | linux kernel (18) | — | ||
| 3 | secure elements | 14 | · | · | · | NEW | c5 enterprise vulnerability management (7) · class 5 enterprise vulnerability management (7) | — | |
| 4 | sun | 13 | · | · | · | PoC 2 | sunos (3) · java system application server (3) · jre (2) | — | |
| 5 | bea | 11 | · | · | · | weblogic server (11) | — | ||
| 6 | ibm | 10 | 3 | · | · | websphere application server (9) · aix (1) | — | ||
| 7 | novell inc. | 10 | 1 | · | · | ×5.0PoC 1 | opensuse (10) | — | |
| 8 | ipswitch | 8 | · | · | · | PoC 3 | whatsup professional (7) · whatsup (1) | — | |
| 9 | microsoft | 8 | 1 | 1 | · | KEV 1PoC 2 | windows 2000 (3) · windows xp (3) · windows nt (2) | — | |
| 10 | alstrasoft | 7 | · | · | · | ×3.5 | article manager pro (3) · webhost directory (3) · e-friends (1) | — | |
| 11 | phpbb group | 7 | · | · | · | PoC 3 | phpbb (3) · phpbb toplist (2) · phpbb advanced guestbook (1) | — | |
| 12 | сообщество свободного программного обеспечения | 7 | · | · | · | PoC 1 | debian gnu/linux (7) | — | |
| 13 | cisco | 6 | · | · | · | PoC 1 | unity express (2) · ip phone 7905 (1) · ip phone 7912 (1) | — | |
| 14 | greg donald | 6 | · | · | · | NEW | destiney links script (4) · destiney rated images script (2) | — | |
| 15 | gentoo foundation inc. | 5 | · | · | · | PoC 3 | gentoo linux (5) | — | |
| 16 | ideal science | 5 | · | · | · | NEWPoC 1 | idealbb (5) | — | |
| 17 | invision power services | 5 | · | · | · | ×5.0 | invision power board (3) · invision gallery (1) · invision community blog (1) | — | |
| 18 | novell | 5 | 2 | · | · | client (2) · netware (2) · imonitor (1) | — | ||
| 19 | raydium | 5 | · | · | · | NEW | raydium (5) | — | |
| 20 | bitrix | 4 | · | · | 1 | NEWNuclei 1PoC 2 | bitrix site manager (4) | — | |
| 21 | geeklog | 4 | · | · | · | NEWPoC 3 | geeklog (4) | — | |
| 22 | hp | 4 | · | · | · | hp-ux (2) · openview network node manager (1) · openview storage data protector (1) | — | ||
| 23 | lksctp | 4 | · | · | · | NEW | stream control transmission protocol (3) · lksctp (1) | — | |
| 24 | mozilla | 4 | · | · | · | PoC 1 | firefox (3) · bugzilla (1) · mozilla suite (1) | — | |
| 25 | oracle | 4 | · | · | · | PoC 1 | mysql (3) · database server (1) | — | |
| 26 | outgun | 4 | · | · | · | NEWPoC 1 | outgun (4) | — | |
| 27 | russcom network | 4 | · | · | · | NEW | loginphp (2) · phpimages (1) · russcom.ping (1) | — | |
| 28 | smartisoft | 4 | · | · | · | NEWPoC 2 | phpbazar (2) · phplistpro (2) | — | |
| 29 | artmedic webdesign | 3 | · | · | · | artmedic newsletter (2) · artmedic event (1) | — | ||
| 30 | caucho technology | 3 | · | · | · | NEW×3.0PoC 1 | resin (3) | — | |
| 31 | dokeos | 3 | · | · | · | NEW×3.0PoC 2 | dokeos (2) · dokeos community release (1) · open source learning and knowledge management tool (1) | — | |
| 32 | e107 | 3 | · | · | · | ×3.0 | e107 (3) | — | |
| 33 | emc | 3 | · | · | · | retrospect (2) · retrospect client (1) | — | ||
| 34 | freetype | 3 | · | · | · | NEW | freetype (3) | — | |
| 35 | fujitsu | 3 | · | · | · | NEW | myweb portal office (1) · netshelter fw (1) · netshelter fw-l (1) | — | |
| 36 | isc | 3 | · | · | · | bind (3) | — | ||
| 37 | mybulletinboard | 3 | · | · | · | PoC 1 | mybulletinboard (3) | — | |
| 38 | mysql | 3 | · | · | · | mysql (3) | — | ||
| 39 | oasyssoft | 3 | · | · | · | NEW | e-business designer (3) | — | |
| 40 | php-fusion | 3 | · | · | · | PoC 1 | php fusion (3) | — | |
| 41 | quagga | 3 | · | · | · | NEWPoC 3 | quagga (2) · quagga routing software suite (1) | — | |
| 42 | xtreme scripts | 3 | · | · | · | NEW | xtreme topsites (3) | — | |
| 43 | yapig | 3 | 1 | · | · | NEW | yapig (3) | — | |
| 44 | yourfreeworld | 3 | · | · | · | NEWPoC 1 | short url and url tracker script (2) · stylish text ads script (1) | — | |
| 45 | 321soft | 2 | · | · | · | NEWPoC 1 | php-gallery (2) | — | |
| 46 | advanced poll | 2 | · | · | · | NEW | advanced poll (2) | — | |
| 47 | albinator | 2 | · | · | · | NEWPoC 2 | albinator (2) | — | |
| 48 | amule | 2 | · | · | · | NEW | amule (2) | — | |
| 49 | andrew godwin | 2 | · | · | · | NEW | bytehoard (2) | — | |
| 50 | angelinecms | 2 | · | · | · | NEWPoC 1 | angelinecms (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins195 CVE2 crit126 vendorsCVSS 6.6bitrix site manager (4) · geeklog (4) · e107 (3)
- Operating Systems64 CVE6 crit2 KEV14 vendorsCVSS 6.1linux kernel (18) · opensuse (10) · debian gnu/linux (7)
- Enterprise Software59 CVE4 crit24 vendorsCVSS 7.2websphere application server (9) · whatsup professional (7) · hp-ux (2)
- Mobile Apps31 CVE1 vendorsCVSS 5.3mac os x (20) · quicktime (11) · mac os x server (4)
- 21 vendorsCVSS 6.7quagga (2) · unity express (2) · adaptive security appliance software (1)
- Security Products29 CVE3 crit12 vendorsCVSS 8.3c5 enterprise vulnerability management (7) · class 5 enterprise vulnerability management (7) · basic analysis and security engine (1)
- Communications26 CVE20 vendorsCVSS 6.5phpbazar (2) · phplistpro (2) · v-webmail (2)
- OSS Libraries25 CVE15 vendorsCVSS 7.5freetype (3) · resin (3) · stream control transmission protocol (3)
- Consumer Software14 CVE1 crit9 vendorsCVSS 7.6firefox (3) · bugzilla (1) · mozilla suite (1)
- Cloud & SaaS9 CVE3 vendorsCVSS 5.4article manager pro (3) · webhost directory (3) · e-friends (1)
- Databases9 CVE5 vendorsCVSS 5.5mysql (6) · postgresql (2) · database server (1)
- ICS / OT / IoT6 CVE5 vendorsCVSS 7.5eva-web (2) · iccp server (1) · xeneo web server (1)
- Hardware Firmware4 CVE2 vendorsCVSS 5.4myweb portal office (1) · netshelter fw (1) · netshelter fw-l (1)
- DevTools & CI4 CVE4 vendorsCVSS 5.7gforge (1) · pioneers meta-server (1)
- Unclassified96 CVE1 crit69 vendorsCVSS 5.9idealbb (5) · raydium (5) · destiney links script (4)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 6 | 195 | 2 | · | 126 | 142 | 6.6 | bitrix site manager (4) · geeklog (4) · e107 (3) |
| Operating Systems▸ 3 | 64 | 6 | 2 | 14 | 40 | 6.1 | linux kernel (18) · opensuse (10) · debian gnu/linux (7) |
| Enterprise Software▸ 7 | 59 | 4 | · | 24 | 33 | 7.2 | websphere application server (9) · whatsup professional (7) · hp-ux (2) |
| Mobile Apps▸ 1 | 31 | · | · | 1 | 4 | 5.3 | mac os x (20) · quicktime (11) · mac os x server (4) |
| Networking Infrastructure▸ 6 | 31 | · | · | 21 | 42 | 6.7 | quagga (2) · unity express (2) · adaptive security appliance software (1) |
| Security Products▸ 5 | 29 | 3 | · | 12 | 18 | 8.3 | c5 enterprise vulnerability management (7) · class 5 enterprise vulnerability management (7) · basic analysis and security engine (1) |
| Communications▸ 3 | 26 | · | · | 20 | 21 | 6.5 | phpbazar (2) · phplistpro (2) · v-webmail (2) |
| OSS Libraries▸ 4 | 25 | · | · | 15 | 17 | 7.5 | freetype (3) · resin (3) · stream control transmission protocol (3) |
| Consumer Software▸ 5 | 14 | 1 | · | 9 | 14 | 7.6 | firefox (3) · bugzilla (1) · mozilla suite (1) |
| Cloud & SaaS▸ 2 | 9 | · | · | 3 | 5 | 5.4 | article manager pro (3) · webhost directory (3) · e-friends (1) |
| Databases▸ 2 | 9 | · | · | 5 | 5 | 5.5 | mysql (6) · postgresql (2) · database server (1) |
| ICS / OT / IoT▸ 3 | 6 | · | · | 5 | 5 | 7.5 | eva-web (2) · iccp server (1) · xeneo web server (1) |
| Hardware Firmware▸ 1 | 4 | · | · | 2 | 7 | 5.4 | myweb portal office (1) · netshelter fw (1) · netshelter fw-l (1) |
| DevTools & CI▸ 2 | 4 | · | · | 4 | 4 | 5.7 | gforge (1) · pioneers meta-server (1) |
| Unclassified | 96 | 1 | · | 69 | 72 | 5.9 | idealbb (5) · raydium (5) · destiney links script (4) |
Weakness × Sector
Which weaknesses hit which solution categories in May 2006
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds79XSS94Code Injection89SQL Injection200Information Exposure189CWE-189264CWE-264134Format String20Improper Input Validation287Improper AuthenticationWeb & CMS Plugins1473211Operating Systems1025231Enterprise Software32211OSS Libraries1122Networking Infrastructure2212Security Products111Consumer Software222Communications1Cloud & SaaS1Databases1