http://it.slashdot.org/it/05/01/09/0737248.shtml?tid=172&tid=113&tid=218
There's been several different exploits for IE SP2 found recently, posted to mailing lists. All sorts of stuff from zone jumping to checking if files exist to writing to files to running arbitrary code.
http://secunia.com/advisories/12889/
oh no, not another activeX headache! I find it funny when aol advertises free anti virus software when their browser is on an ie framework (they scrapped the idea of moving to ghecko and announced an ie model).