Have you ever heard of Java and Flash? There is a reason why browsers
explicitly disable Java, heck OSX removed it from the OS completely.
Flash will run sandboxed in newer browsers but Java afaik cannot.
Almost all malware is delivered using them, one research company I read
about has lists of non-public Java exploits they sell to governments...
Phil From: Warren Bailey