Who can give me the right code (tag) for Flash ?

[Learner29]

Hi

I arrived to this thread looking at the security threat that flash signatures could present.

Some friends told me that the flash signatures could be used for "cross site attacking" and that the cookie (which contains the username and password) of a moderator could be stolen with a malicious-code flash swf file in the sig.

Do you agree ? Disagree ? can you confirm ??