Detailed analysis of security vulnerabilities
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.