XSS bug in Yahoo Mail could have let attackers take over email accounts
January 21, 2016
0
To have an account taken over, a victim would have only needed to open a boobytrapped email.
Source: Sophos