Internet Explorer 4.0, Internet Explorer 5.0 vulnerabilities

Internet Explorer 4.0 and 5.0 allow a malicious website to obtain client cookies from another domain by including that domain name and escaped characters in a URL, known as the 'Unauthorized Cookie Access' vulnerability.

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the 'cross frame' vulnerability.

Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the 'Cross Frame Navigate' vulnerability.