CVE-2006-2775
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.
Date published : 2006-06-02
http://www.securityfocus.com/bid/18228
http://www.securityfocus.com/archive/1/435795/100/0/threaded