Editing Outlook Express (section)

===Security issues===
Outlook Express was one of the earlier email clients to support [[HTML email]] and scripts. As a result, emails were commonly infected with [[Computer virus|viruses]].<ref>{{cite web|url=https://www.cfesa.com/Membersonly/security/email.htm|title=Email Viruses|access-date=2016-08-07|archive-date=2022-04-10|archive-url=https://web.archive.org/web/20220410152600/https://cfesa.com/Membersonly/security/email.htm|url-status=dead}}</ref><ref>{{cite web|url=http://www.techimo.com/forum/technical-support/59062-virus-problems-outlook-express.html|title=Virus problems with Outlook Express|date=March 31, 2003|work=TechIMO|access-date=August 7, 2016|archive-date=October 7, 2016|archive-url=https://web.archive.org/web/20161007121331/http://www.techimo.com/forum/technical-support/59062-virus-problems-outlook-express.html|url-status=dead}}</ref> Previously, another security flaw was that a [[Scripting language|script]] could automatically be opened as an [[email attachment|attachment]]. Another bug was in Outlook Express's attachment handling that allowed an executable to appear to be a harmless attachment such as a graphics file. Opening or previewing the email could cause code to run without the user's knowledge or consent. Outlook Express uses Internet Explorer to render HTML email. [[Internet Explorer]] has been subjected to many security vulnerabilities and concerns.

With Outlook Express SP2 (part of Windows XP SP2), Microsoft has tried to correct the security holes. Outlook Express now blocks images inside emails by default.<ref>{{cite web|url=http://support.microsoft.com/kb/329570 |title=Cannot Open email Attachments in Outlook Express After You Install SP1|date=August 15, 2007|work=Support|publisher=[[Microsoft]]|access-date=December 17, 2012}}</ref><ref>{{cite web|url=http://support.microsoft.com/kb/843018|title=Images are blocked when you open an email message in Outlook Express on a Windows XP Service Pack 2-based computer|date=April 16, 2007|website=Support|publisher=[[Microsoft]]}}</ref> It uses only the restricted security zone for HTML email, which disables scripts and imposes restrictions on what web content can be rendered. It also warns when opening potentially malicious attachments.<ref>{{cite web|url=http://support.microsoft.com/kb/883260 |title=Description of how the Attachment Manager works in Windows XP Service Pack 2|work=Support|publisher=[[Microsoft]]|date=August 27, 2004 |access-date=December 17, 2012|url-status=live|archive-url=https://web.archive.org/web/20050309134732/http://support.microsoft.com/kb/883260|archive-date=March 9, 2005}}</ref>