With regard to malicious scripts buried in email, the most important thing is not wether or not you turn previews on or wether or not you allow HTML. The most cruial and vitally important thing is a good Anti Virus program with integrated email scanning! You should check for updated virus definitions at least daily. If your AV program is any good it will include an automatic updater, it doesn't hurt to check for updates manually as well! You should ensure you have a good Firewall installed as well, you can't be too carefull these days. Martin