== Ask Yourself Whether

* the cookie is for instance a _session-cookie_  not designed to be sent over non-HTTPS communication.
* it's not sure that the website contains https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content[mixed content] or not (ie HTTPS everywhere or not)

There is a risk if you answered yes to any of those questions.
