Have you ever think about the securing your ajax enabled websites? Hacker use XSS vulnerabilities to hack this kind of site.
I have found great link that deeply discuss the this XSS vulnerabilities. Mike Ormond has deeply explained about stopping hackers to hack your asp.net Ajax enabled website.
here is the link