DoS, session fixation, information leakage.
vulners.com/securityvulns/securityvulns:doc:29396
vulners.com/securityvulns/securityvulns:doc:29397
vulners.com/securityvulns/securityvulns:doc:29398