Flaws in the Mail and Safari applications <A HREF="http://www.theregister.co.uk/2008/07/24/iphone_mail_phish_vuln/">bundled with the iPhone</A> leave users at risk of phishing attacks.
A URL-spoofing vulnerability means that a domain pointed to by a specially crafted URL can appear to be that of a trusted brand.