Frame injection
A frame injection attack is an attack on Internet Explorer 5, Internet Explorer 6 and Internet Explorer 7 to load arbitrary code in the browser.[1] This attack is caused Internet Explorer not checking the destination of the resulting frame[2], therefore allowing arbitrary code such as Javascript or VBScript.[3]
Remedy
In the Internet Options dialog, disable "Navigate sub-frames across different domains" and do not visit or follow links from untrusted websites, spam emails or splogs.[4]