GMail Vulnerable To Contact List Hijacking
Affordable Hosting — Using a form of cross scripting, it becomes easy to steal a GMail user's contact list if they visit a certain type of website. The only condition is you have to be logged in to GMail at the time of the attack.