Mail.ru: cross site scripting bypass session

Reflected XSS in cloud.mail.ru via cookie value...