Is anyone aware of any security vulnerabilities of Outlook Web Access? All I can ascertain in terms of vulnerability that OWA introduces is the auto-execution of scripts embedded in HTML email when that email is viewed.

Does anyone know of any other "surprises" that might be introduced with this service?

Cheers,

Alan