All the links would be something like "index.html?events", and the vbscript would take "events" and use that to form the url to the content that should be in the iframe.

There is little that any password management extension could do in that scenario. However, some legitimate websites use forms from another domain, embedding them with an iframe.