Firefox 3.0.7, the latest version of the open source browser, contains security fixes for five vulnerabilities, including three that are critical. It also fixes a URL spoofing bug whereby invisible control characters could mislead users into thinking that certain URLs were from a specific domain when they were not. You can download the latest version of Firefox here, or you can use the browser’s built-in update function to apply the fixes.