IE flaw exposes weakness in Yahoo! filtering