Information leak, authentication bypass, crossite scripting, weak encryption, DoS.
vulners.com/securityvulns/securityvulns:doc:9475