We are running traditional drupal multisite sharing sites/all/modules

Where are uploaded files supposed to go?
If I visit the admin/build/themes page from two different domains it seems to break theme settings when visiting the site from other pages - is this expected?