Microsoft has downplayed a security vulnerability in Mahala.ms, but the site that provided access to the programme has been down for a year.