Would the exploit of Google's thumbnail service count as this, where you could ask it to provide a thumbnail of someone else's private document?