A simple example: you can pass a link to someone and have some javascript that submits form for them without them knowing.