This is a known Service Pack 2 problem which appears only when viewing local web pages containing ActiveX/Java/JavaScript code. The solution is to add the following code as the first line of the sessearch.htm file:
<!-- saved from url=(0014)about:internet -->
You will find more details at http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml/overview/XpSp2Compat.asp
Here's a fragment concerning this problem:
If your Web page needs to run a Microsoft ActiveX control or script, you can add a Mark of the Web comment to the HTML of the page. This Internet Explorer feature forces the HTML file into the security zone of the specified URL so that it can run the script or ActiveX code in a less restrictive zone. Mark of the Web works in Internet Explorer 4.0 and later.
Use the following comment to insert a Mark of the Web comment into a page whose domain is identified, replacing http://www.example.com with the URL of the Internet or intranet domain where the page is hosted.
<!-- saved from url=(0022)http://www.example.com -->
Use the following comment when you need to generically insert a Mark of the Web.
<!-- saved from url=(0014)about:internet -->
Save This Page