Security Advisory

DWA in the default config allows you to grab other peoples password hash :

http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf