Here's some of my settings.

Download signed ActiveX controls - prompt
Download unsigned ActiveX controls - Disabled
Initialize and script ActiveX controls not marked safe - Disabled
Run ActiveX controls and plug-ins - prompt
Script ActiveX controls marked safe for scripting - Enable

Microsoft VM / Java permissions - Disable Java - This could be it, Mocrosoft VM is no longer supported, I now run Sun VM

Display mixed content - Prompt

Launching programs and files in Iframes - prompt

Navigate sub-frames across different domains - disable

Scripting for Java applets - Enable

Just to be clear, I'm not saying there is anything wrong with rcuniverse. I'm just saying theres a lot more going on here then simple jpeg advertising. Using asp in todays day and age makes a website an instant target for hackers. It's not my site, my mouth is shut.