CVE-2005-3429

Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.

• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.htmlExploit, Patch
• http://marc.info/?l=bugtraq&m=113053680631151&w=2
• http://securitytracker.com/id?1015117
• http://www.osvdb.org/22682
• http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdfExploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22906
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.htmlExploit, Patch
• http://marc.info/?l=bugtraq&m=113053680631151&w=2
• http://securitytracker.com/id?1015117
• http://www.osvdb.org/22682
• http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdfExploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22906

Published

Nov 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3423Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 a…
• CVE-2005-3424Cross-site scripting (XSS) vulnerability in GNUMP3D before 2…
• CVE-2005-3425Cross-site scripting (XSS) vulnerability in GNUMP3D before 2…
• CVE-2005-3426Cisco CSS 11500 Content Services Switch (CSS) with SSL termi…
• CVE-2005-3427The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.…
• CVE-2005-3428Cross-site scripting (XSS) vulnerability in Rockliffe MailSi…
• CVE-2005-3430Incomplete blacklist vulnerability in Rockliffe MailSite Exp…
• CVE-2005-3431Absolute path traversal vulnerability in Rockliffe MailSite …
• CVE-2005-3432MiniGal 2 (MG2) 0.5.1 allows remote attackers to list passwo…
• CVE-2005-3433Buffer overflow in Mirabilis ICQ 2003a allows user-assisted …
• CVE-2005-3434Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd …
• CVE-2005-3435admin_news.php in Archilles Newsworld up to 1.3.0 allows att…9.8