I ran into some strange security errors with Thickbox and Flash in (surprise, surprise) IE6. Thickbox’s forums clued me into suspecting the problem had to do with SWFObject. The solution was to give the SWFObject’s script a defer attribute.
There’s still the issue of how much memory Thickbox causes IE6 to hog, but at least it’s working.
