Programs written by Cory would not be able to send mail, but they could access data.
Authorship is determined by cryptographically strong signatures on the programmatic objects.
The abilities and permissions of the programs attached to the form depends on the ECL for the user opening the form. Finally, the default ECLs for Notes are very permissive. In fact, the defaults allow any program, regardless of authorship, all 11 permissions. This level of access can be leveraged to run arbitrary code with the privileges of the user. Combining all these attributes, and assuming the default configuration for ECLs, we believe it is possible for an intruder to mail a malicious program to a Notes user in such a way that the program will be executed when the user opens the mail.