[Mimedefang] OT: HTML mail

[-ray]

We're thinking about switching to horde for campus webmail, and i'm 
getting some "pressure" to turn on inline html mail, which is off by 
default in horde.  It's on in our current webmail, which is why they think 
we "need" it.

Can someone point me to a good webpage that details the security problems 
of html mail?  A little googling turned up some of the minor problems like 
bandwidth, rendering, speed, etc, which IMO are all secondary to security. 
Thanks.

ray