actually, last week I got infected with the VBS.LoveLetter virus by visiting a site with the source code written on it. so it is possible.