For IE6, If the "display" value   of the IFRAME was set to "none", the $(iframe).show will cause IE6 security prompt poping  out.
The solution is using $(iframe).css("display","block") instead of $(iframe).show