Internet Explorer 6 users:

This Proof of concept shows that it is possible to perform actions on a web page in one domain using javascript hosted on an entirely different domain. This shouldn't be possible, but if you use IE6 it is!

Click to view your cookie for google (there'll be a short pause before you see an alert box containing cookie data).