Microsoft Outlook Express is susceptible to a vulnerability which will allow javascript to be execute in the message window. Tested against Microsoft Outlook Express version 6.0.2800.1123 on Microsoft Windows XP SP2.
154f9ceed006b384227ef5e980324be03cdb572bf6e83c732153c6d9bca688df