Google has <A HREF="http://news.zdnet.com/2100-1009_22-5892525.html?tag=zdnn.alert">fixed a security flaw on its Web site</A> that opened the door to phishing scams, account hijacks, and other attacks. The flaw, known as a cross-site scripting vulnerability, existed on the Web site for Google's AdWords advertising program and a customer training site, according to security company Finjan Software, which discovered the problem.