With the growth in flash adverts and limited oversight..the latest infection i dealt with was, from what I could gather, borne via facebook ad with no click required.
So its not simply a matter of getting executables in emails and opening them...the virus/malware creators are getting better about how they deliver them as well.