If you are running IE6 or IE 7 on Xp you should be careful.
A standard Windows ActiveX control called the Microsoft Streaming Video control, part of DirectShow, has a vulnerability in it that is being exploited actively in the wild.
Read more on Security Watch