Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014
No PoCs found on GitHub currently.