I just found out that on January 16th Microsoft has released an security update for Team System Web Access that I would urge everybody to install. You can read more on the update on Hakan Eskici's blog here.

Note that this is a full install so you must run an uninstall and install to complete. This means you will have some downtime to apply this update.

I just wanted to give everybody a heads up on this.