IE is a security risk. You can get IE to run arbitrary code just by creating a specially formatted link, in one of probably a couple hundred ways. Among other things.