Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-0850
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-020