In certain cases, Internet Explorer would send a full filename including path as HttpPostedFile.Filename which causes an exception.