user has too much access

[Darwin]

I have a client where they all can see each others'
calendars in the folders list. However, there is one user
that can see the contents of everyone's entire mailbox,
including all subfolders. The user is not in any AD
groups that would give her these permissions. Where else
should I be looking?

Thanks,
Darwin
(e-mail address removed)