CVE-2007-3757
Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed.
Date published : 2007-09-27
http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html