http://feedproxy.google.com/~r/Securityweek/~3/IFVgUN_RU5g/flaw-allowed-hackers-abuse-paypal-confirmation-emails