Rockliffe Mailsite Express
6 CVEs affecting Rockliffe Mailsite Express. Latest disclosed: 2005-11-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-3431 | | 2005-11-02 | Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the At… | |
CVE-2005-3430 | | 2005-11-02 | Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving t… | |
CVE-2005-3429 | | 2005-11-02 | Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local u… | |
CVE-2005-3428 | | 2005-11-02 | Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a messa… | |
CVE-2005-3288 | | 2005-10-23 | Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feat… | |
CVE-2005-3287 | | 2005-10-23 | Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with executable extensions… |