IE flaw could prove troublesome