MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
http://www.securityfocus.com/bid/4316
http://www.securityfocus.com/archive/1/262906