Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
CVSS Metrics