Microsoft Exchange Public Folders can be set to allow anonymous connections (set by default). If this is not changed it is possible for an attacker to gain critical information about the users (such as full email address, phone number, etc) that are present in the Exchange Server. Additional information: http://www.securiteam.com/windowsntfocus/5WP091P5FQ.html