Some email clients are vulnerable to attacks via 'mailto' links
zdnet.com