CVE-2005-3287: Rockliffe Mailsite Express

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions such as ASPX, which are not converted to .TXT like other dangerous extensions, and which can be directly requested from the cache directory.

Affected products

• Rockliffe Mailsite Express: any version

Published 2005-10-23. Last modified 2026-06-16.