But even with IE6 in XP, assuming both are patched, you wouldn't be able to create an activeX object and access the files on drive with JS, except for cookies of course.