Yah, you should look at http://www.shocking.com/~rsnake/xss.html There are a lot of risks there, it seems.