CVE-2007-0977: IBM Lotus Domino

High severity, CVSS 7.1. EPSS: 19.9% chance of exploitation in the next 30 days.

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.

Affected products

• IBM Lotus Domino: version 5.0 only; version 6.0 only

Published 2007-02-16. Last modified 2026-06-16.