has points that might interest you.
(look at the next page of that thread too).
Quote from a Mentor there,
I guess others here will be able to comment on these notes.
Instead Internet Explorer supports JScript and VBScript.
The main reason for disabling JScript is with IE6 where there are a lot of vulnerabilities in activeX and so you really ought to disable activeX when using that browser so as to plug hundered of known security holes. If you do that then you get an alert that activeX is disabled every time you load a page unless you also turn off active scripting to disable JScript and VBScript. Most of those activeX vulnerabilities were fixed in IE7.
The only browser where client side scripting is a potential security issue is Internet Explorer and that is the one browser where people are least likely to turn off scripting as it is the browser that tends to be most used by people who are least aware of those issues since the easiest way to fix the security issues in old versions of IE is to switch to a different browser.