CVE-2007-5544: IBM Lotus Domino

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files (shared memory) in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character sequences into a session.

Affected products

• IBM Lotus Domino: before 6.5.5 (fixed in 6.5.5); from 7.0, before 7.0.2 (fixed in 7.0.2); version 6.5.5 only; version 7.0.2 only
• IBM Lotus Notes: up to and including 6.5.5; from 7.0.0, before 7.0.3 (fixed in 7.0.3)

Published 2007-10-29. Last modified 2026-06-16.