I came across this article: http://www.symantec.com/connect/blogs/venom-vulnerability-could-expose-virtual-machines-unpatched-host-systems
It's basically discussing the possibilities of an 'outsider' using the floppy controllers on the VM's to exploit a threat. Now, we have floppy drives added to our virtual machines, but they're not connected.
In a nutshell, would that mean we can just leave things as they are? Or would it be best to just remove the floppy drives?