> Oh, great.

I'm not sure if the following steps guard against this particular loophole, but you can follow the instructions on the link below to tighten up your system a bit.

Really, though, it's preposterous that ANY piece of software EVER offer a user an option to "make this more secure." That should be the unchangeable default. It should not be *possible* for code that somebody emails you or posts to a web site to do anything to your system. The fact that IE and Outlook aren't laughed out of the business market is a sobering testament to the strength of Microsoft's monopoly.