Just heard about this latest exploit from US-Cert
This caught my attention, because I sometimes use frames and redirection. Yikes!