PatchTheCVEmailsite express vulnerabilities and fixes
Recent CVEs affecting mailsite express, with upgrade or downgrade steps. 6 tracked.
Also searched as: mailsiteexpress.
mailsite express has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2005-11-02. Highest priority: CVE-2005-3430 (score 46/100).
- CVE-2005-3431 MEDIUM 5.0 UPGRADE Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to r
- CVE-2005-3430 HIGH 7.5 UPGRADE Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to uplo
- CVE-2005-3429 MEDIUM 4.3 UPGRADE Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwo
- CVE-2005-3428 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers t
- CVE-2005-3288 MEDIUM 5.0 MITIGATE Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by
- CVE-2005-3287 MEDIUM 5.0 MITIGATE Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute
FAQ
How do I fix mailsite express vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mailsite express being exploited right now?
None of the tracked mailsite express CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mailsite express CVE should I patch first?
CVE-2005-3430 currently ranks highest (46/100): Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to uplo.