Phil Ringnalda discovered a month ago that Bloglines is susceptible to a <a title=“phil ringnalda � Blog Archive � No, ask what Bloglines can do to you” href=“http://weblog.philringnalda.com/2005/11/21/no-ask-what-bloglines-can-do-to-you">cross site scripting attack that can expose your entire account to someone who has compromised a feed to which you subscribe. He notified the company a month ago and hasn’t seen any action on that front, so he’s publicizing the problem to alert Bloglines users.