This is still a bad idea for this to happen automatically. Yes, you have to run the attachment, but it shouldn't get that far. This has already been labeled as a bug 109249.
Steve -- To reply by e-mail, remove ALL CAPS from my address...#$%!*!! spammers...
