Those on unsecured networks can use tools like eavesdrop (mac) and firesheep (firefox) to pick up TCP communica. Even look at the images of the websites that people are visiting from hijacked computers.
It is important to stress that WEP is crap. WEP may as well be unsecured as it just takes...