CVE-2005-2175: IBM Lotus Notes

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.

Affected products

• IBM Lotus Notes: any version

Published 2005-07-09. Last modified 2026-06-16.