that file can contain a line making your computer the proxy for all urls, and now you get everyone's web traffic.
"Just registering with DHCP with a computer name of``WPAD""is enough to get you into DNS and hijack the entire network."