There is a new bug in Netscape Communicator 4.5 for Windows 95 (probably others) which allows reading files from the user's computer. It is not necessary the file name to be known, because directories may be browsed. The contents of the file may be sent to an arbitrary host. In order this to work, you need both Java and Javascript enabled.
Workaround: Disable Javascript or Java.

Go to Georgi Guninski's home page