Pen-tester gets past Microsoft VB macro barriers

Outlook Forms aren't macros, after all - but is it a bug or a feature?

A bunch of white-hat researchers have turned up a nasty new vector for attacking Microsoft Outlook: a forms creation feature that bypasses macro rules so attackers can get to the victim's shell."