On Apr 7, 2004, at 11:23 AM, Tom R. no spam wrote: > For a start, have you googled for any security alerts > about this Plaxo software? I just did that quickly, and > found eg "Plaxo Job Title field allows cross-site scripting", > etc at http://lists.virus.org/issalert-0403/msg00004.html. > Also, at http://seclists.org/lists/bugtraq/2004/Mar/0125.html, > how someone was able to grab all of a person's contact list. > And http://www.securitytracker.com/alerts/2004/Mar/1009457.html, > which may be about the same issue. Scripting, let alone > networked scripting, is a significant security vulnerability. This is way over my head. But I think I understand what you are saying. Thanks for the warning and research. I will definitely stay away from Plexo. Jim