The following demos show how CSS features can be used to exploit a user.
CSS overlays (requires a delicious account)
CSRF Post without javascript
CSS scripting