The thing to remember here is, Spy Axe is just one example of what can be done with this bug, until the Devil Billgatesebub puts out a patch to cover it. Right now its just trojans and little spyware apps.
If somebody writes one of those nasty worm viruses based on this type of exploit it could get ugly real quick.