Yahoo Multiple vulnerabilities (Authentication Bypass, Session Binding,
Cookie Encoding Security Weakness, Cross-Site Scripting and URL Redirection)

http://www.xdisclose.com/XD100001.txt

[snip]

Glad I'm not using yahoo right now. If all of this is true, it seem that yahoo has done a real disservice to its customers.

i wonder how long these vulnerbilities have been open since.