What harm can an HTML file do? Plenty, according to Barracuda Labs!
Dave Michmerhuizen published a must read email security update to the Barracuda Labs Internet Security Blog, HTML is Not Harmless – Email Security Update.
Don’t get fooled (again?) by a seemingly innocent HTML email attachment. It can do plenty of damage!