As I noted in this post, RSA encryption is often carried out reusing exponents. Sometimes, the exponent is exponent 3, which is subject to an attack we’ll describe below [1]. (The most common exponent is 65537.)
Suppose the same message m is sent to three recipients and all three use exponent e= 3. Each recipient has a different modulus Ni, and each will receive a different encrypted message