This Gmail bug has been fixed but it would have allowed access to any account in gmail:

http://www.elhacker.net/gmailbug/english_version.htm

Interesting, I got a mail about it from the SecGuru.com mailing list.