ALBANY — Thousands of contaminated sites left by oil giant ExxonMobil and its predecessor companies have not been cleaned up because of lax action by state regulators, a new report claims.