It is possible to invoke winhlp32.exe from Internet Explorer (XP) that might lead to remote code execution.