...I don't have a 'free May... :P
So here one example:
* Updated - 01.05 *
To the point: if user can add content (like ‘new page’ – what is not in default installation;))
he can manipulate a little with parameters to get as an answer some 'information disclosure' bug.
Check this line for more "information" ;)