How I Built An XSS Worm On Atmail

Building a self-propagating XSS worm against the Atmail webmail front end: crafted image tags evade filters to steal contacts, send emails and expose inboxes, echoing the MySpace and TweetDeck worms.