An exploit against MS09-002 (IE7) is in the wild. This is a vuln that may lead to code execution in the context of the user. Thanks for the heads up on Twitter!