Microsoft has confirmed that a security hole in it's MSN Messenger can expose a user's hotmail password. If you use Messenger to check your hotmail account and cancel the page before it loads fully your password is left embedded in the page's HTML. Not nice if you share a machine with a coworker or leave your desk unattended during the day.