This is an interesting web page that describes how a web page can automatically install a Dashboard widget. It also looks like Apple does not provide a way for you to remove an installed Dashboard widget.
This web page installs a moderately malicious widget. In order to remove it, you will have to manually remove it and restart the Dashboard.
Apple need to prevent these types of attacks.