Attackers who act as a man-in-the-middle on an HTTP session can inject rogue cookies onto a site and use them to obtain data.from http://ift.tt/1JAyfRA