| V-6320 | High | An unsupported version of Outlook is installed. | Without product support, vulnerabilities are not being tracked or fixed by the vendor. |
| V-6324 | High | An unsupported version of Office is installed. | Unsupported vendor software is not being updated or evaluated for security vulnerabilities. |
| V-6328 | Medium | The Error Reporting tool for Office XP/2003 is installed or enabled. | This could potentially send sensitive application data to the vendor and needs to be disabled. |
| V-6323 | Medium | Outlook is not configured to read HTML as text. | HTML in email can potentially contain mobile code. This parameter will ensure that mobile code can not be executed in either the preview pane or when the message is opened. |
| V-6321 | Medium | Outlook is not configured to use the Restricted Sites Security Zone. | Outlook needs to run in the context of the restricted sites zone so when it processes messages in an HTML format the content of the message is controlled and the machine is protected from... |
| V-6326 | Medium | The Macro Security Level option in Office 2000, XP (2002), or 2003 applications is not set to Medium, High, or Very High. | The security level controls the action of macros. Macros can be embedded into documents to be executed at the time the document is opened. This can potentially intitiate a malicious action. |
| V-6327 | Medium | The option for trusting all installed add-ins and templates is not disabled. | This option ensures that macro security warning are displayed for all addins and templates. |
| V-6325 | Medium | The latest Office service pack is not installed. | The lastest service pack needs to be applied to ensure all security related patches are incorporated and that the software is a t supported service level. |
| V-12781 | Medium | Office 2003 Customer Experience Improvement Program | When sending data as part of the Customer Experience Improvement Program there is a possibility of exposing sensitive data. |
