Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
lotus domino server 4.6
lotus domino server 4.6.x