Ok, I'll be the first to admit that I've shrugged off quite a few known XSS
exploits because they were too much of a pain to fix in the shrinkwrap apps
I was working with.  But, this article brings home just how dangerous they
are.

http://www.thehackernews.com/2011/07/xss-harvest-harvesting-cross-site.html

-- 
James McPhee
jmcphe@gmail.com