Yeah it is called javascript. You always at risk of getting them. That is why you have AntiVirus. Anyways Firefox protects against Spyware not Viruses. Got it?
Alot of idiots have been complaining about how they use Firefox and still get spyware. Well first off, they need to configure it, it just does not do it on its own. Also alot of these people don't understand the concept that some P2P software gives them spyware. By either getting a P2P client, or download a bunch of files laced with spyware, but because of their stupidity they think it was all FireFox.
And then after they give firefox bad talk, people go out and get alot of un-needed programs.