Lots of things have security issues.. Apache, sendmail, Mac OSX to name a few. Its still the user that causes the problems in virtually all cases.
You do know that IE won't even run an activeX control unless you tell it to? (Back to that user problem again!)