IBM Lotus recognized the potential for a cross-site scripting vulnerability to exist under certain circumstances.