Crossite scripting, request redirection, HTTP response splitting.
vulners.com/securityvulns/securityvulns:doc:10176
vulners.com/securityvulns/securityvulns:doc:10177
vulners.com/securityvulns/securityvulns:doc:10178