A variation of the status bar spoofing flaw in Internet Explorer has been discovered using the label for id trick.