"At a time when Apple, Mozilla and other tech giants are taking steps to prevent users from browsing the Web with outdated versions ofJava,Yahoo!is pushing many of its users in the other direction: The free tool that it offers users to help build Web sites installs a dangerously insecYahoo! has offered SiteBuilder to its millions of users for years, but unfortunately the tool introduces a myriad of security vulnerabilities on host PCs.SiteBuilder requires Java, but the version of Java that Yahoo! bundles with it isJava 6 Update 7. It’s not clear if this is just a gross oversight or if their tool really doesn’t work with more recent versions of Java. The company has yet to respond to requests for comment.
Link to Original Source