News 

The vulnerability is caused by to the AutoFill feature not properly checking the URL before automatically filling saved user credentials into forms. This may be exploited in a phishing attack to steal user credentials via malicious forms in the same domain. For more information see Secunia Advisory 23066.

Successful exploitation requires that the "User names and passwords" option is enabled in the AutoFill preferences. Should you wish to leave this enabled, a Saft Lite plugin update purports to fix the flaw, though the developer has yet to provide any information on how this is accomplished. Alternatively avoid visiting untrusted websites and responding to spam.

The same flaw has also been reported in Firefox.