Firefox, if allowed, can store usernames and passwords. If you visit a login page again, the password is then entered automatically. But this means, that a second, evil page on the same server could steal those saved passwords.
Vulnerable Systems:
* Firefox version 2.0.0.5 and prior
The method Firefox uses to autocomplete fields allows attackers sitting on the same site (http://www.mysite.com/mypage) as that were you have stored your web site (http://www.mysite.com/myotherpage) to capture the password stored in the Firefox's password storage mechanism.
