A new security hole in Microsoft's Hotmail service allows enterprising snoops to browse your email messages without a password.
If a Hotmail user clicks on an attachment that contains a Javascript Trojan horse, an attacker can read, send, and delete messages from that
person's account.