Netscape 4.5 vulnerabilities

A remote attacker can read information from a Netscape user's cache via JavaScript.

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled 'remember passwords.'

Talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.

Talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, violating the Java security model.