CVE-2007-5967: Improper Certificate Validation

A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval...