Thanks for the post and the link.
A properly configured locked down Internet Explorer would not allow Java Script so it would not be vulnerable from that stand point.

However, the default configuration would have those vulnerabilities.