The standard login page uses a simple script to pass your login credentials (user name and password) to the mail server. It is possible that if someone were to .