I've played with Microsoft Active Agent a half dozen times and now I'm starting to think there may be some exploit similar to the stealing keystrokes issue that Michael Z found. For those unfamiliar with Microsoft Agent: http://www.microsoft.com/msagent/using/userinterface.asp
Anyway, has anyone played around with it in IE7.0? It looks like ActiveX is complete disabled by default in IE7.0.
- RSnake
Gotta love it.
http://ha.ckers.org