There's no way in hell those are all exploitable bugs. I'll bet my hat that those are "insecure practices".