mmm although not being a notes user i remember a friend of mine who had a server running it, and i found several security problems, all remote which allowed me to do pretty much what i wanted to. These will have probably been fixed by now though.