4. CWE-352 : Cross-Site Request Forgery (CSRF)
5. CWE-120 : Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
6. CWE-22 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
7. CWE-494 : Download of Code Without Integrity Check