A little birdie sent me the cross site scripting attack today. I love it.
Note: no harm was actually done to the site with this attack, it only defaced the attacker's view.