rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-5153 
The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5154 
PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatefolder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5155 
PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code via the config[pdf_module] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5156 
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5157 
Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the "Management Console's Remote Client Install name search".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5158 
The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5159 
Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving JavaScript.  NOTE: the vendor and original researchers have released a follow-up comment disputing the severity of this issue, in which the researcher states that "we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this... I have not succeeded in making this code do anything more than cause a crash and eat up system resources"
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5160 
Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006.  NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that "I have no undisclosed Firefox vulnerabilities. The person who was speaking with me made this claim, and I honestly have no idea if he has them or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5161 
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5162 
wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) via a long Content-Type header, which triggers a stack overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5163 
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5164 
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T00:00:00.000Z
CVE-2006-5165 
PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[ppa_root_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T00:00:00.000Z
CVE-2006-5166 
PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T00:00:00.000Z
CVE-2006-5167 
Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) BSX_LIBDIR parameter in scripts in /files/ including (a) abook.php3, (b) compose-attach.php3, (c) compose-menu.php3, (d) compose-new.php3, (e) compose-send.php3, (f) folder-create.php3, (g) folder-delete.php3, (h) folder-empty.php3, (i) folder-rename.php3, (j) folders.php3, (k) mbox-action.php3, (l) mbox-list.php3, (m) message-delete.php3, (n) message-forward.php3, (o) message-header.php3, (p) message-print.php3, (q) message-read.php3, (r) message-reply.php3, (s) message-replyall.php3, (t) message-search.php3, or (u) settings.php3; and the (2) BSX_HTXDIR parameter in (v) files/login.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T00:00:00.000Z
CVE-2006-5168 
Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T16:00:00.000Z
CVE-2006-5169 
Cross-site scripting (XSS) vulnerability in John Himmelman (aka DaRk2k1) PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to registering a user.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T16:00:00.000Z
CVE-2006-5170 
pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-04T20:00:00.000Z
CVE-2006-5171 
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow," a different vulnerability than CVE-2006-5172.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-16T20:00:00.000Z
CVE-2006-5172 
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-16T20:00:00.000Z
CVE-2006-5173 
Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-17T22:00:00.000Z
CVE-2006-5174 
The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-05T21:00:00.000Z
CVE-2006-5175 
Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5176 
Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5177 
The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigger a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5178 
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check and before the file is opened by the underlying system, as demonstrated by symlinking a symlink into a subdirectory, to point to a parent directory via .. (dot dot) sequences, and then unlinking the resulting symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5179 
Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5180 
PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter, a different vector than CVE-2006-5102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5181 
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in (1) change_preferences2.php, (2) create_file.php, (3) upload_local.php, and (4) upload_multi.php, different vectors than CVE-2006-5124.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T00:00:00.000Z
CVE-2006-5182 
PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5183 
Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5184 
SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5185 
Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5186 
PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmp_rel_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5187 
PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5188 
Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5189 
PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appl[APPL] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5190 
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5191 
PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5192 
PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZ_INCLUDE_DIR parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5193 
PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T19:00:00.000Z
CVE-2006-5194 
Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T21:00:00.000Z
CVE-2006-5195 
Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T21:00:00.000Z
CVE-2006-5196 
The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T21:00:00.000Z
CVE-2006-5197 
PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) /pdshoppro.mdb, (2) /data/pdshoppro.mdb, or (3) /shoppro/data/pdshoppro.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T21:00:00.000Z
CVE-2006-5198 
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T21:00:00.000Z
CVE-2006-5199 
Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation, which allows local users to gain privileges to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-5200 
Unspecified vulnerability in Adobe Breeze 5 Licensed Server and Breeze 5.1 Licensed Server allows attackers to read arbitrary files via unknown vectors related to "URL parsing."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-5201 
Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T18:00:00.000Z
CVE-2006-5202 
Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T18:00:00.000Z
CVE-2006-5203 
Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5204 
Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery (CSRF) attack involving forced SQL execution by an admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5205 
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5206 
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5207 
PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileys_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5208 
Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5209 
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T19:00:00.000Z
CVE-2006-5210 
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IM_FILE identifier with double-url-encoded "../" sequences ("%252e%252e/").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-16T23:00:00.000Z
CVE-2006-5211 
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T21:00:00.000Z