install 6u10 or above

clear java cache

visit page:

http://weblogs.java.net/blog/joshy/archive/2008/05/java_doodle_cro.html

Applet will load, but only one image will be loaded. In console, you will see serveral exception like this:

Exception in thread "Thread-15" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)

Hit browser refresh, or any subsequent load of the same page will work, all images will be loaded.

Looks like we have problems for initial load of resources with crossdomainxml with multiple threads.