Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers such as (1) Accept (2) Accept-Charset (3) Accept-Encoding (4) Accept-Language and (5) Content-Type.