A flaw in the Autodiscover protocol can expose email passwords to third parties.

Source: Exchange/Outlook autodiscover bug exposed 100,000+ email passwords