Amazon.com Widgets
JavaScript can expose data on Web 2.0 sites: "JavaScript can be used to grab data from improperly secured Web 2.0 applications, Fortify Software, a maker of source code audit tools, said in a paper published on Monday"
(Via News.blog: Security (CNET News.com).)