Risk: Low
A flaw has been discovered in Firefox 2.0.0 that if exploited, could facilitate phishing attacks. The flaw has been confirmed in version 2.0.0 and may also exist in other versions.
The flaw exists because Firefox's Password Manager does not properly check the URL before automatically filling in saved user credentials into forms. Successful exploitation of the flaw could result in user credentials being stolen via malicious forms in the same domain.
To eliminate the risk of falling victim to this flaw, users should disable the "Remember passwords for sites" option on the security tab in options.