Security researcher Paul Stone reported that a Java applet could be used to mimic interaction with form autocomplete controls and steal entries from the form history.
Firefox 4 was not affected by this issue.
Vulmon