chief investigative officer for viaForensics, said that only one of the seven applications his group examined contained no such security flaw. That application is distributed by the Vanguard Group.
http://www.wired.com/threatlevel/2010/11/bank-apps-for-phones/
paypal had exposure