As a test I sent some email with the following JAVASCRIPT in the HTML email. Here's the code in plain sight.
file:javascript:while (true) {alert('this window will never see the light of day. mohahahha - Dr.Evil');}
This highlights an issues that all versions of Outlook have. There is no defense in these programs for "bad" html code.
Except to turn off the message preview, then never open unsolicited email.
Bob
On 5 separate occassions, I have received emails from someone with a yahoo account and when I attempt to reply, it freezes up Outlook. I end up having to close the program and restart my computer. I usually delete the email and create a new one rather than attempting to reply again. OS: XP Home. Has anyone heard of anything like this?
By the way, I get tons of emails from different customers, but it's only the occassional yahoo account that does it, not all.

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic