Taking over PayPal accounts with Flash

I might add that this is one reason it's a good idea to have flash disabled by default :)