Internet Explorer 7 Cross-Site Scripting Vulnerability

Secunia has a created a test page for this new vulnerability that could be used in possible phishing attacks.  This new vulnerability requires users to hit the REFRESH button when navigation is cancelled to cross script to another site. 

Internet Explorer 7 Cross-Site Scripting Vulnerability
http://secunia.com/advisories/24535/
http://www.frsirt.com/english/advisories/2007/0946

QUOTE: A weakness has been identified in Microsoft Internet Explorer 7, which could be exploited by malicious websites to conduct spoofing or phishing attacks. This issue is due to an input validation error in the resource page "res://ieframe.dll/navcancl.htm" when generating the "Refresh the page" link in order to reload a site, which could be exploited by attackers to spoof the displayed address bar by tricking a user into clicking on the "Refresh the page" link while visiting a malicious web page.