Crossite scripting, possibility to verwrite other user settings.
vulners.com/securityvulns/securityvulns:doc:9176
vulners.com/securityvulns/securityvulns:doc:9185