There is a severe flaw in Microsoft Corp.'s ubiquitous Internet Explorer browser that could enable a malicious Web site operator to hijack user sessions and steal their credit card numbers and other sensitive data
http://www.eweek.com/article2/0,3959,462381,00.asp