Cross-site scripting (XSS) vulnerabilities in Twitter and Google Calendar could be used to steal cookies and session IDs, according to a security researcher. Nir Goldshlager, a researcher with Avnet ...