Cisco released a patch for a critical flaw that allowed a remote attacker to gain control of one of its email security appliances.