The SNOsoft Research Team recently performed a light weight webmail security assessment of the @Mail Webmail product. @Mail is very much like OWA with respect to look, feel and functionality.
The result of this research project was the discovery of two bugs in the product. These bugs were released as formal advisories by Netragard.
Advisory ID: NETRAGARD-20061218
https://netragard.com/pdfs/research/ATMAIL-XSRF-ADVISORY-20061206.txt
Advisory ID: NETRAGARD-20061206
https://netragard.com/pdfs/research/ATMAIL-XSS-NETRAGARD-20061206.txt



