Microsoft Internet Explorer 7 allows remote malicious users to determine the existence of page history via the history.length JavaScript variable.
microsoft internet explorer 7.0