If anyone here remembers the Windows XP Help and Support Center exploit that Microsoft never officially released a patch for (unless you count SP1), this seems to be the exact same thing, where a hcp:// link can cause file deletion, etc...