Outblaze web based email is vulnerable to user cookie spoofing that will allow an attacker to retrieve a user's password.