HRESULT m2([in] BSTR sIn,[out] BSTR* sOut,[out] short* iOut, [out,retval] BSTR* sRet);
...
STDMETHODIMP Ctest2::m2(BSTR sIn, BSTR *sOut, short *iOut, BSTR *sRet){
    *sRet = L"sRet";
    *sOut = L"sOut";
    *iOut = 10;
HTML
<OBJECT ID....></OBJECT>
<script language="javascript">
function Bn()
{    var i=3;
    var s="dddd";
    txt2.value = test2.m2(txt1.value, s, i);
    txt3.value = s;
    txt4.value = i;
}
</script>

<input type=button value="Test" onclick="Bn();">
<input type=text name=txt1 size=15>
<input type=text name=txt2 size=15>
<input type=text name=txt3 size=15>
<input type=text name=txt4 size=15>

DM>HRESULT m2([in] BSTR sIn,[out] BSTR* sOut,[out] short* iOut, [out,retval] BSTR* sRet);
DM>...
DM>STDMETHODIMP Ctest2::m2(BSTR sIn, BSTR *sOut, short *iOut, BSTR *sRet){
DM>    *sRet = L"sRet";
DM>    *sOut = L"sOut";
DM>    *iOut = 10;
DM>

DM><script language="javascript">
DM>function Bn()
DM>{    var i=3;
DM>    var s="dddd";
DM>    txt2.value = test2.m2(txt1.value, s, i);
...
DM></script>

DM>HRESULT m2([in] BSTR sIn,[out] BSTR* sOut,[out] short* iOut, [out,retval] BSTR* sRet);
DM>...
DM>STDMETHODIMP Ctest2::m2(BSTR sIn, BSTR *sOut, short *iOut, BSTR *sRet){
DM>    *sRet = L"sRet";
DM>    *sOut = L"sOut";
DM>    *iOut = 10;

STDMETHODIMP Ctest2::m2(BSTR sIn, BSTR *sOut, short *iOut, BSTR *sRet)
{
    *sRet = CComBSTR( "sRet" ).Detach();
    *sOut = CComBSTR( "sOut" ).Detach();
    *iOut = 10;

HRESULT m3([in] VARIANT sIn, VARIANT* iOut,  [out,retval] BSTR* sRet);
...
STDMETHODIMP Ctest2::m3(VARIANT sIn, VARIANT *iOut, BSTR *sRet){
    if(sIn.vt != VT_BSTR) return E_INVALIDARG;
    UINT len = ::SysStringLen(sIn.bstrVal);
    if(iOut->vt == VT_DISPATCH){
            *sRet = CComBSTR( "iOut - VT_DISPATCH" ).Detach();
        IDispatchEx* pDE;
        HRESULT hr = iOut->pdispVal->QueryInterface(IID_IDispatchEx, (void**)&pDE);
        if(FAILED(hr)) return hr;
        // Получить первый элемент, если нет - создать
        DISPID dispid;
        hr = pDE->GetDispID(CComBSTR(L"0"), fdexNameEnsure, &dispid);
        if(FAILED(hr)) {
            pDE->Release(); return hr;
        }
        // Присвоить значение
        VARIANTARG arg;
        arg.vt = VT_I4;
        arg.lVal = len;
        DISPPARAMS dsp;
        dsp.rgvarg= &arg;
        dsp.cArgs=1;
        dsp.cNamedArgs=1;
        DISPID dput=DISPID_PROPERTYPUT;
        dsp.rgdispidNamedArgs=&dput;
        hr= pDE->InvokeEx(dispid, LOCALE_USER_DEFAULT, DISPATCH_PROPERTYPUT, &dsp, NULL, NULL, NULL);
        pDE->Release();
        if(FAILED(hr)) return hr;
    }
    return S_OK;
}

HTML
function Bn()
{
  var i = new Array(1);
  txt2.value = test2.m3(txt1.value, i);
  txt4.value = i[0];
}

</script>
<input type=button value="Test" onclick="Bn();">
<input type=text name=txt1 size=100>
<input type=text name=txt2 size=100>
<input type=text name=txt4 size=100>

switch(iOut->vt){
    case VT_I2:    iOut->lVal = 44;    break;    // вызов из VBScript
    case VT_I4:    iOut->lVal = 44;    break;    // вызов из JScript

HTML

<script language="VBScript">
Function Bn_B()
    Dim i
    i = 1
    txt2.value = test2.m2(i)
    txt3.value = i
end function
</script>
<script language="JScript">
function Bn_J()
{
        var i = 1;
    txt2.value = test2.m2(i);
    txt3.value = i;
}
</script>
<input type=button value="VBScript" onclick="Bn_B()">
<input type=button value="JScript" onclick="Bn_J()">
<input type=text name=txt2 size=100>
<input type=text name=txt3 size=100>

long i = 5;
p->m3( &i );
// Какое здесь i после возврата? В in-proc без маршаллинга - 5, при маршаллинге - 55

HRESULT Cx::m3([out] long* iOut)
{
  if( *iOut != 5 )
    *iOut = 55;
  return S_OK;
}

  Dim a(10) As Long, v
  v = a(1) ' свойство по умолчанию
  For Each v In a ' нумератор
    Debug.Print VarType(v), v
  Next v