Even having an email address to send reports to would be good for a lot of websites. I sometimes don't bother reporting these issues for fear of being threatened with legal action.
you can send security reports about yahoo to security@yahoo-inc.com. All of them are addressed, and you won't be threatened with legal action. If you're lucky you might get a T-shirt.
PS: I'm an ex-paranoid. things might have changed since I left, but I'm pretty sure they'll still listen to reports.
PS: I'm an ex-paranoid. things might have changed since I left, but I'm pretty sure they'll still listen to reports.