Hi Soda...

A fairly recent exploit that comes to mind is the HTML+TIME exploit. I know that Yahoo and Hotmail have already rectified this problem months ago, but similar undiscovered exploits are always a concern of mine.

http://www.greymagic.com/security/advisories/gm005-mc

Thanks!