Windows keeps a local copy of WebDAV files, usually inside C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\. Normally this cache gets evicted, when the user is done working with the files. This is not the case on Windows 7 and Windows Server 2008 R2.
Microsoft provides a hotfix for this issue, as this is also a security problem.