Two XSS vulnerabilities were identified in the Google.com website, which allow an attacker to impersonate legitimate members of Google's services or to mount a phishing attack. Although Google uses common XSS countermeasures, a successful attack is possible, when using UTF-7 encoded payloads.
59bf61bff2bd6383a518dd69e9fe7c03e6555e3a674d165e8bdcd5bdf688cffd