This problem can be triggered by having a domain name mismatch between the domain name that was used in the URL to access the VM I-Net server and the domain name that is returned for the IP address of that server. As of JRE 1.6.0_22 this is deemed to be a security violation (cross-site scripting attack), and access is blocked unless there is a special file that indicates which cross-site scripting is allowed. To solve this problem, do one of the following: