Multiple web-based mail systems, when browsed through Internet Explorer, may allow for arbitrary Javascript execution.