Google introduced today its "base" program. It seems however that this BETA stuff was not ready for primetime roll out. There is a huge XSS problem within the code.

You can inject code in the search form and make a page look like.. well see for yourself and DO NOT SUBMIT YOUR CREDITCARD INFORMATION!

But do a view source instead. Cross site scripting and google, Scarry