Unsafe function of ICQPhone.SipxPhoneManager ActiveX control allows to download and execute malware code from ICQ message or Web page.
vulners.com/securityvulns/securityvulns:doc:14945