Sorry for bringing an old topic up. But you should also block bitmap images. I believe for IE users there was an exploit that had something to do with attached bitmaps and how there displayed?
This was a long time ago, and may have been patched now, if it has I'll shut up now!
[edit] And the fact that bmp's are just bloody huge!