Windows XP
By having the user drag two links to the links bar and then having him/her click the link on the links bar, it is possible to execute javascript in the context of chrome, thereby remotely compromising the user.
Toolbars