It is indeed a security issue. If I navigate to a webpage first and then refresh that page and redirect to the csv file, Vista puts up a bar at the top of the browser saying "download has been blocked, click here etc." and at least you get to click there and accept the download. But I could not find a setting in Internet Options Security settings to avoid this hassle.
What a pain!
Reg