Security researchers warn that attackers can gain access to credentials, stored mail and other connected systems.