Microsoft Internet Explorer DHTML Edit and Help ActiveX crossite scripting
DHTML ActiveX and Help allows code injection into context of different server. By combining this vulnerability it's psosible to execute code in local machine zone. This vulnerability can potentially be used for silent spyware/adware installation...