GreyMagic Security Advisory GM#006-MC – GreyMagic discovered that by sending a maliciously formed email to a Yahoo user it is possible to circumvent the filter and execute script in the context of a logged-in Yahoo! user due to a cross site scripting flaw.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33473/GM006-MC.txt
Source: https://packetstormsecurity.com/files/33473/GM006-MC.txt.html