A massive security hole has been discovered in all versions prior to 8
Writing about the flaw Symantec security researcher Hon Lau said: "The ease [with] which this weakness can be exploited is breathtaking."
Full details here :
http://news.bbc.co.uk/2/hi/technology/6234181.stm Apparently affects Firefox and IE versions