Information Exposure
Email/Password Recovery Flaw
Cross-Site Request Forgery (CSRF)
Captcha Bypass
Content Spoofing
Sensitive Directory/File Contents Disclosed
Authenticated Action
Content is hidden
Cross-site scripting XSS