Vulnerabilities in Office Online Server