Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local \HTML-embedded resource files\ in the Microsoft Management Console (MMC) library which allows remote authenticated users to execute arbitrary commands aka \MMC Redirect Cross-Site Scripting Vulnerability.\