take a look at this page which explains that scripts that run midi files have been used to exploit weaknesses in MS applications. Even when you are sure all is safe, it is not a good idea to do this, as many have blocked the process.

A lot of these neat tricks were invented by folks who had NO idea what nastiness they would be used for. Too bad, but it's better...for now...to just attach the .midi.