Security Alert - Outlook View Control Exposes Unsafe Functionality

Date: 12 July 2001
Software: Outlook 98, 2000, and 2002
Impact: Run code of attacker's choice via either web page or HTML e-mail.
for more information, see bulletin MS01-038

This demo page contains scripting and you can see what vulnerabilities exist.  

Help File for the view control

To use public folders in the view control, use this syntax:

 <param name="Folder" value="\Public Folders\All Public Folders\Group Calendar">