Why having the . at the end of someone's PATH is a security ?

[shaul]

> There shouldn't be a "." in your PATH; even at the end, it's a
> security risk. 

Why ? How it can be exploited ?