Content is hidden
Key Exchange without Entity Authentication
Cross-site Scripting (XSS) - DOM
Business Logic Errors
Cross-site Scripting (XSS) - Reflected