DoS, information leak (including authentication data), crossite scripting, session hijacking.
vulners.com/securityvulns/securityvulns:doc:6690
vulners.com/securityvulns/securityvulns:doc:7697
vulners.com/securityvulns/securityvulns:doc:8027
vulners.com/securityvulns/securityvulns:doc:8028
vulners.com/securityvulns/securityvulns:doc:8075
vulners.com/securityvulns/securityvulns:doc:8076
vulners.com/securityvulns/securityvulns:doc:8077
vulners.com/securityvulns/securityvulns:doc:8078