CVE-2006-0663

no score yetEPSS 5.7%

ibm lotus domino inotes client: no CVSS score yet. EPSS 5.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded javascript URI, as demonstrated using "javascript:"; or (3) when the Domino Web Access ActiveX control is not installed, via an email attachment filename.

EPSS: 5.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2006-02-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:lotus_domino_inotes_client

References

http://secunia.com/advisories/16340
http://secunia.com/secunia_research/2005-38/advisory/
http://securitytracker.com/id?1015610
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919
http://www.osvdb.org/23077

Check your stack JSON