Outlook is not configured to read HTML as text.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6323	DTMO003	SV-6393r1_rule	DCMC-1	Medium

Description
HTML in email can potentially contain mobile code. This parameter will ensure that mobile code can not be executed in either the preview pane or when the message is opened.

STIG	Date
Microsoft Outlook 2003	2014-10-03

Details

Check Text ( C-601r1_chk )
Procedure: Start the Outlook application. On the Tools menu, select the Options… item. On the Options window, select Preferences. Examine the E-Mail options. Criteria: If the Read all standard mail in plain text check box is checked, this is not a finding. ---- This check only applies to Office XP and 2003.

Fix Text (F-5846r1_fix)
In Outlook go to the Tools menu and select the Options... item. On the Options window, select Preferences and examine the E-Mail options. Make sure the Read "all standard mail in plain text" check box is checked.