That's why you don't open email attachments and you run a *ix server instead of a windows one. Of course, that implies you're able to seal all of the security holes on a *ix machine and Apache. Things are starting to get interesting, eh?