CVE-2005-3288: Rockliffe Mailsite Express

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.

Affected products

• Rockliffe Mailsite Express: any version

Published 2005-10-23. Last modified 2026-06-16.