CVE-2012-3302: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via 1 a URL accessed during use of the Mail template in the WebMail UI or 2 a URL accessed during use of Domino Help through the Domino HTTP...

PT-2012-4637

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions 7.x through 8.x before 8.5.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific URLs, including those accessed during use of the Mail template in the WebMail UI or Domino...

CVE-2000-0022: Undefined Security Weakness

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0021: Undefined Security Weakness

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...