I don't know why I don't find this surprising, just that it has taken so long to identify.
I don't know why some people insist on sticking with such an old version of IE when in this case updating to IE6 with Service Pack 1 would resolve the problem. Then they would only have to worry about the vulnerabilities in IE6 SP1
