A Web site can attempt to access a cookie that is associated with another Web site (one Web site is not supposed to be able to access any cookies except for those it left there earlier). If you use Yahoo! or Google e-mail and you configure that mail to automatically log you in, having your cookie might be enough for a hacker to log into your e-mail too. Whoever does this can send mail from your account, receive your e-mail, and view all your stored e-mail. That includes e-mails with your résumés attached, notes to and from your friends, and forgotten passwords that your financial services Web sites sent you. Oh my!
At the very least, a hacker can use a hijacked cookie to track what Web sites you've visited and when. Much of what's going on with spyware is about advertising, and knowing what sites you're visiting is quite valuable to advertisers.
Keep your spyware updated! !lol