> I use IE 5.00.3315.1000 / Win2k Pro SP2 and no other patches. I am not > vulnerable: IE correctly displays the warning ("Security Alert") saying that Yeah, it seems that people with IE 5.00 that have not installed any of the MS "security" patches are not vulnerable. But latest patched IE 5.00 are vulnerable. Stefan Esser