ComputerBytesMan.com: Notepad Popups
This is the kind of thing I shouldn't even write about:
Do Notepad popups represent a security risk or are they simply another way for spammers and marketers to annoy us? Because of a design flaw in Internet Explorer, Notepad popup windows can be displayed from an HTML email message or Web page regardless of browser security settings. In addition, Notepad popups can access files on a hard disk, possibly causing stability problems in a Windows system.
Click the link above to see an example of the problem. Now that the genie's out of the bottle, expect to see a lot more of these. Aren't you glad Microsoft is no longer upgrading IE?