There is a bug in Netscape Communicator 4.5 (all platforms?) which allows reading files from remote user's computer.