There is still a vulnerability for users of the Greasemonkey extension (let's you modify the appearance of websites from the browser)
Users are advised to uninstall Greasemonkey, or downgrade to vers. 3.5 or earlier.
http://www.eweek.com/article2/0,1759,1838702,00.asp?kc=EWRSS03119TX1K0000594