You don't need to execute JS in order to phish, as the original link alludes to with the html comment trick.

This particular comment thread was mostly about webmail clients. But to your specific question... take a look at the link for an incomplete list of email clients that runs JS

http://en.wikipedia.org/wiki/Comparison_of_email_clients#Tem...