The best bet is generally an xss attack. Though there are other ways, you could sniff one on a wireless network if no encryption is in use.