“An apparent vulnerability in Microsoft Corp.’s Internet
Explorer 5.0 browser exposes user names and passwords on FTP
sites.
The security hole, reported… by BugNet at www.bugnet.com,
appears to be more than the usual theoretical flaw caused by
JavaScripts and Active X controls.
This one impacts IE 5.0 users every time they access a
password-protected FTP site. Every time IE 5.0 users access such a
site, their user name and password are automatically revealed,
according to BugNet. …the user name and password are
displayed at the bottom of the [user’s] screen…”