MSIE DHTML Edit Control Cross Site Scripting Vulnerability
Automatic Cross Site Scripting (perhaps remote compromise?)

Discussion
Example