insidious

yes there are many exploits for myspace... not just phishing users, but also editing your own cookie to a stolen cookie. OR the more harder way without stealing there cookie... by making your own cookie and encrypting it.... cookie contains victims email, friendid, etc etc. But you get the point. PLUS Javascript is filtered so its much harder to compromise a user.