Mozilla Thunderbird code execution

It's possible to execute javascript via object tag...