Executing arbitrary commands without Active Scripting or ActiveX

Running "c:/winnt/system32/notepad.exe".. ]]>