Don, Paul Russell gives a very concise description of the exposure in his post http://peach.ease.lsoft.com/scripts/wa.exe?A2=ind0105&L=lstown-l&F=&S=&P=201 65 Discussions of this topic can be found in the May and June 2001 archives of http://peach.ease.lsoft.com/archives/lstown-l.html and http://peach.ease.lsoft.com/archives/lstsrv-l.html under subjects: "HTML posts make LISTSERV lists a soft target for hackers" and "Change request: Language=NoHTML should cause rejection of single part HTML messages" Jim -----Original Message----- From: LISTSERV list owners' forum [mailto:[log in to unmask]]On Behalf Of Don Wiss Sent: Saturday, August 25, 2001 7:40 PM To: [log in to unmask] Subject: Re: Change request: Language=NoHTML should cause rejection of single part HTML messages Jim Walker wrote: >There is now a Trojan in the wild that will not be stopped by >language=NoHTML. This Trojan is not now widespread but it is a serious >threat. > > http://www.zdnet.com/zdnn/stories/news/0%2C4586%2C5096155%2C00.html Why wouldn't language=NoHTML stop it from going out to list subscribers?