CVE-2012-3302: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via 1 a URL accessed during use of the Mail template in the WebMail UI or 2 a URL accessed during use of Domino Help through the Domino HTTP...

CVE-2000-0022: Undefined Security Weakness

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0021: Undefined Security Weakness

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...