Stealing your friends passwords

Once not long ago (a year or so) I've abused a cross-site scripting vulnerability of a forum I'm a member of, and stole all user passwords. I've never used any of them though. I guess I did It for that childish false sense of superiority. But I must admit, I really enjoyed it. :)