Microsoft gives in to denied IE vulnerability
"Microsoft has finally accepted responsibility for its role in a security weakness that allows malicious websites to run harmful code on an end user's machine. The acknowledgment of the vulnerability in Internet Explorer comes after three months of saying the burden lay with third-party software makers whose programs actually accepted the nasty payloads."

There goes Microsoft's credibility...again.

Full Article: http://www.theregister.co.uk/2007/10/12/microsoft_uri_reversal/