Microsoft OWA vulnerabilities

http://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-5076/Microsoft-Outlook-Web-Access.html

http://www.windowsitpro.com/print/remote-computing/owa-security-risks-often-overlooked