A maliciously constructed vCard could be used to open a backdoor onto Palm Pre devices. The flaw was discovered in May. Palm/HP has yet to patch it.