Due to a flaw in Firefox attackers can use iFrame and URL obfuscation to capture information from your browser sessions.