I was thinking of how all these people want to hack MySpace and it crossed my mind. Could you use "Forgot My Password" and use a javascript injection to get them to email you someone elses password? If not, could you please explain?