Calling ExecWB with the optical zoom command ID and persistence flag from a hidden iFrame set the browser’s zoom to 10% — persistently, across all tabs and even after closing and reopening the browser.

function zoomOut()
{
	document.getElementById("webBrowser").ExecWB(63, 2, 10); // OLECMDID_OPTICAL_ZOOM to 10%
}

The ExecWB method (exposed by the WebBrowser ActiveX control) accepted three arguments: the command ID (63 = OLECMDID_OPTICAL_ZOOM), the execution option (2 = OLECMDEXECOPT_DONTPROMPTUSER, which writes the setting persistently to the registry), and the zoom value (10 = 10%). A user who visited the page and didn’t know how to reset the zoom (View > Zoom > 100%, or Ctrl+scroll) would be left with an effectively unusable browser rendering pages at a tenth of their normal size, persisting across sessions.

Found during my years at Microsoft (2006–2014). These bugs were patched long ago — shared here as a historical record for learning purposes.