CVE-2007-5856
Quick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from making network requests, which might allow remote attackers to obtain sensitive information.
Date published : 2007-12-19
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html