Where's the Beef - xss / bankofamerica.com.html /
There's an interesting list at this site of XSS vulnerabilities that the authors found...