Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638