Running SMTP on a webserver

If I am using the SMTP services only to send out email confirmations for my
orders on our webserver, is there a security issue?

Put another way, is there a major risk running SMTP on our webserver?