This demonstrates a bug in IE 4.0, 4.01 under Windows 95 (don't know for other versions), which allows reading text or HTML file on the user's machine. Create the file c:\test.txt and its contents are shown in a message box. The file may be sent to arbitrary server even if behind a firewall.
To test it, you need Javascript enabled.
This file is created by Georgi Guninski.