[RootbeaR]

"Secunia states on its IE 8 page that Microsoft has addressed only two of the four vulnerabilities found to date in the new browser. The service's report of a URL path-spoofing vulnerability was posted on Aug. 19. A "Charset Inheritance Cross-Site Scripting Vulnerability" in IE 8 remains unpatched more than two years after the problem was first discovered, according to Secunia's report. (The vulnerability also affects IE 7.)

To be sure, Firefox and other browsers periodically suffer from flaws such as IE's. But until Microsoft learns to close its browser's holes within days, as Mozilla and other browser developers do, using Firefox or another alternative to IE is still your best bet."
http://WindowsSecrets.com/comp/090827