"This bug allows remote HTML content to be loaded, replacing the content of the original e-mail message," a user with the ... build a functional password 'collector' using simple HTML and CSS ...