Exchange 2013 vulnerable due to NTLM hash exposure. tl;dr, Office 365 is better for most people.