rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-2166 
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2167 
Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2168 
FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2169 
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2170 
Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2171 
Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2172 
Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to (1) MKD or (2) XMKD, as demonstrated by the Infigo FTPStress Fuzzer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2173 
Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2174 
Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, or (3) year parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2175 
PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) show.php or (2) top.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2176 
Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) new_input, (2) new_url, or (3) new_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2177 
Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2178 
Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.asp, or (4) heading parameter to result.asp.  NOTE: vectors 1 and 2 might be resultant from SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2179 
Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2180 
Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long argument to the (1) NLST or (2) APPE commands, as demonstrated by the Infigo FTPStress Fuzzer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2181 
Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2182 
Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2183 
Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2184 
Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter.  NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2185 
PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-22T17:00:00.000Z
CVE-2006-2186 
zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2) /photos/themes/testing/ URIs, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2187 
Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) a parameter in i.php, and the (2) album and (3) image parameters in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2188 
Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Body field of a private message (PM), (2) BBCode, or (3) a forum post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2189 
SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.  NOTE: this issue can be used to trigger path disclosure.  In addition, it might be primary to vector 1 in CVE-2006-1135.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2190 
Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in (1) openwebmail-send.pl, (2) openwebmail-advsearch.pl, (3) openwebmail-folder.pl, (4) openwebmail-prefs.pl, (5) openwebmail-abook.pl, (6) openwebmail-read.pl, (7) openwebmail-cal.pl, and (8) openwebmail-webdisk.pl.  NOTE: the openwebmail-main.pl vector is already covered by CVE-2005-2863.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T10:00:00.000Z
CVE-2006-2191 
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-2193 
Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-08T19:00:00.000Z
CVE-2006-2194 
The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-05T18:00:00.000Z
CVE-2006-2195 
Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-15T10:00:00.000Z
CVE-2006-2196 
Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-26T10:00:00.000Z
CVE-2006-2197 
Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-15T10:00:00.000Z
CVE-2006-2198 
OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-30T18:00:00.000Z
CVE-2006-2199 
Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-30T18:00:00.000Z
CVE-2006-2200 
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T19:00:00.000Z
CVE-2006-2201 
Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T16:00:00.000Z
CVE-2006-2202 
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-04T17:00:00.000Z
CVE-2006-2203 
Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2204 
SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote authenticated moderators to execute arbitrary SQL commands via the selectedpids parameter, which bypasses an integer value check when the $id variable is an array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2205 
The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to change the sample rate of an audio device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2206 
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2208 
Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) hash and (2) page parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2209 
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2210 
Cross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter.  NOTE: this issue might be resultant from the directory traversal vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2211 
Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2212 
Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) PASS command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2213 
Hostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an unspecified value in the key_data_length field of an EAPoL frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2214 
Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php.  NOTE: this issue has also been reported to affect 1.7.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2216 
Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1) misc.php and (2) member.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2217 
SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2218 
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T10:00:00.000Z
CVE-2006-2219 
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-08T17:00:00.000Z
CVE-2006-2220 
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain sensitive information via a negative LIMIT specification, as demonstrated by the start parameter to memberlist.php, which reveals the SQL query in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-08T17:00:00.000Z
CVE-2006-2221 
A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1_1 and earlier, generates an installer that allows local users to cause a denial of service via a symlink attack on the bitrock_installer.log temporary file.  NOTE: it is possible that this vulnerability is present in other products that use this installer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2222 
Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several "\" (backslash) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2223 
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2224 
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2225 
Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2226 
Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2227 
Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the req_message parameter, because the value of the redirect_url parameter is not sanitized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2228 
Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' (equals) character, which bypasses a restrictive regular expression that attempts to remove onmouseover and other events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2229 
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2230 
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905.  In addition, if the only attack vectors involve a user-assisted, local command line argument of a non-setuid program, this issue might not be a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2231 
Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) site, (3) city, (4) state, (5) country, and possibly (6) name fields, which are viewed via viewguest.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2232 
Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z
CVE-2006-2233 
Buffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2.50209, allows remote attackers to execute arbitrary code via a long string in the first argument to SetBannerUrl.  NOTE: portions of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-05T19:00:00.000Z