What damage can a malicious site cause with JavaScript?

What damage can a malicious site cause with JavaScript?

People say that JavaScript is potentially dangerous, but are there any good examples of how harmful a site can be for its visitors when JavaScript is enabled?