CVE-2008-7037
The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...