http://mozillanews.org/?article_date=2004-12-08+06-48-46
http://secunia.com/search/?search=firefox
http://security.itworld.com/4345/050208browserflaw/page_1.html
And those bugs where fixed very quickly, much faster then the better funded IE.
The spoofing flaw affects ALL browsers. The standard was flawed. Any browser that had code written to standard was compromised. IE wasn't compromised by default but if the person installed the component it would be.