I accidentally hijacked someone else's hotmail account (and subsequently their abandoned Myspace account) because I was able to register the hotmail they used for it and then use forgot password to send a reset email on Myspace. I assume the same thing could be done for other services.