CNet has been keeping an updated list of major websites that have and have not been impacted by this flaw, and whether or not they have updated their security. If you have an online web service, you can go here to see if your website is vulnerable to the attack. Even if the flaw has been fixed, you should change your password if you have an account on any impacted website.