A researcher reports that the popular Mailbox app for iOS automatically executes javascript embedded ... a malicious attacker, using a browser exploitation framework can perform phishing attacks ...