At 6:14 PM -0800 2001/11/08, Microsoft Product Security wrote: >Software: Internet Explorer >Impact: Exposure and altering of data in cookies >Max Risk: High At risk of sounding petulant, I'd like to mention something overlooked by Microsoft, Bugtraq, etc. Microsoft Internet Explorer for (classic) MacOS appears NOT to be vulnerable to this exploit. AFAICT, it will not run scripts of any kind embedded in an about: URL. Could someone verify the status of IE on OS X, Solaris or HP-UX? http://www.google.com/search?q=Internet+Explorer+Solaris+HP-UX -F.