A new vulnerability found in GMail makes it possible for a malicious web site to surreptitiously cause a GMail user’s e-mail to be redirected to another address.