An Egyptian hacker has found a zero-day XSS exploit within the Yahoo! Messenger list. The exploit manages to access cookies set by Yahoo and send them to the attacker. Once the attacker has the cookies and the username, they can successfully access the respective account by tricking the browser into thinking that authentication had already been done and the victim account is logged in. Don`t believe that the exploit will be used by the buyer just to play a couple of innocent pranks on YIM contacts.”]