Cross-Domain Vulnerability in Outlook Express MHTML Protocol Handler