By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
CVE Status: Modified
No CVSS data available
Exploit-db Github