Security Advisory
CVE-2010-0808
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."