Microsoft Exchange Server 2000 SP3 2003 SP1 and SP2 and 2007 does not properly decode certain MIME encoded e-mails which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.