Are there any known security holes in JavaScript?
JavaScript has a more troubling history of security holes. Unlike the Java holes, which potentially can change data on the user’s disk, JavaScript holes generally involve infringements on the user’s privacy. Although many bugs have been closed, others keep popping up. The most recent bug was reported on October 16, 1997.