I just found out that on January 16th Microsoft has released an security update for Team System Web Access that I would urge everybody to install. You can read more on the update on Hakan Eskici's blog here.
Note that this is a full install so you must run an uninstall and install to complete. This means you will have some downtime to apply this update.
I just wanted to give everybody a heads up on this.
CTO at Xpirit, Microsoft Regional Director, Visual studio ALM MVP, Speaker, Pluralsight Author and IT Architect Consultant