Mozilla has released Firefox 3.0.6 to fix six security holes, including one rated "critical." According to US-CERT, exploitation of the vulnerabilities could let an attacker run malicious code on infected machines, grab sensitive information, or conduct cross-site scripting attacks. One of the bugs fixed was a JavaScript issue in the browser engine shared with Mozilla's Thunderbird email client and its SeaMonkey internet suite. -- CAM