Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
https://exchange.xforce.ibmcloud.com/vulnerabilities/34983
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-3136
http://www.securityfocus.com/bid/24352
http://www.0x000000.com/?i=334