CVE-2007-1091
Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers.
Date published : 2007-02-26
http://www.securityfocus.com/bid/22680
http://www.securityfocus.com/archive/1/461023/100/0/threaded