'Mouse tracking' flaw found in Internet Explorer