Rumors of ActiveX off by default in IE7
There have been a few rumors as a result of a blog article on Microsoft watch (see reduced security mode) that IE7 might default to ActiveX being crippled like it is in Windows Server 2003.
This is good because it would fix a lot of security problems, but could also be bad because it could break a lot of websites, maybe including Ajax ones which use an ActiveX control on IE.
The IE blog however reported that what many regard as a huge security issue stays. In some ways it's a shame because Firefox has shown that ActiveX is not required, but I suppose it is to be expected.