Versions of Safari that are earlier than 3.1.1 for both MacOS and Windows contain Cross Site Scripting vulnerabilties. See Apple’s original advisory at: http://support.apple.com/kb/HT1467