Flaws in the Mail and Safari applications bundled with the iPhone leave users at risk of phishing attacks.A URL-spoofing vulnerability means that a domain pointed to by a specially crafted URL can appear to be that of a trusted brand.