Code execution, authentication bypass, information disclosure, crossite scripting, DoS.
vulners.com/securityvulns/securityvulns:doc:32580