http://money.cnn.com/2006/01/03/tech...reat/index.htm

I heard about this over the weekend, but brushed it off.

Pretty much, I could upload a picture with this security breach to FTR, and then steal the passwords of anyone who loaded the picture. You wouldn't even know until I drained all the money out of your accounts.

The good news, Microsoft says they have no fix.