4. CWE-434 : Unrestricted Upload of File with Dangerous Type
5. CWE-601 : URL Redirection to Untrusted Site ('Open Redirect')
6. CWE-120 : Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
7. CWE-22 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')