system: You are an expert security code reviewer. You will be shown a source code file along with a multi-select question listing several CWE (Common Weakness Enumeration) categories. Your task is to identify which of the listed CWEs are present in the code.

OUTPUT FORMAT: Respond with the letter(s) of all correct options, sorted alphabetically and comma-separated, wrapped in a single \boxed{...}. Examples: `\boxed{A}` for one correct, `\boxed{A,C}` for two, `\boxed{A,C,E}` for three. Output the boxed answer ONLY -- no explanation, no other text.

user: ```python
from flask import Flask, request, make_response
from random import randint

app = Flask(__name__)


@app.route('/')
def randomnum():
    global number
    number = randint(0, 10000)
    return str(number)


@app.route('/one/<int:num>')
def one(num):
    global number
    if num == number:
        m = '{} was correct!<br>\r\nnew number: '.format(num)
    else:
        m = '{} was wrong :(<br>\r\nnew number: '.format(num)
    number = randint(0, 10000)
    return m + str(number)


@app.route('/two/<int:num>')
def two(num):
    global number
    if num == number:
        m = '{} was correct!<br>\r\nnew number: '.format(num)
    else:
        m = '{} was wrong :(<br>\r\nnew number: '.format(num)
    number = randint(0, 10000)
    return m + str(number)


@app.route('/three/<int:num>')
def three(num):
    global number
    if num == number:
        m = '{} was correct!<br>\r\nnew number: '.format(num)
    else:
        m = '{} was wrong :(<br>\r\nnew number: '.format(num)
    number = randint(0, 10000)
    return m + str(number)


@app.route('/post', methods=['GET', 'POST'])
def post():
    default_resp = '''
POST /post HTTP/1.1<br>
Host: 127.0.0.1:5000<br>
Connection: close<br>
Content-Type: application/x-www-form-urlencoded<br>
Content-Length: 18<br>
<br>
new_number=12345
        '''
    global number
    if 'new_number' in request.form:
        try:
            number = int(request.form['new_number'][:-1].strip())
            return 'number set to {}!'.format(number)
        except:
            return default_resp
    else:
        return default_resp


@app.route('/check/<int:num>')
def check(num):
    global number
    if num == number:
        return '{} was correct!'.format(num)
    else:
        return '{} was wrong'.format(num)


@app.route('/<polo>.html')
def marco(polo):
    """
    Nice URL to use for testing CPH's find/replace:
    http://127.0.0.1:5000/[0]find_[1]find_[2]find_[3]find_[4]find_[5]find_[6]find_[7]find_[8]find_[9]find_[10]find.html
    """
    return polo


@app.route('/cookie')
def new_cookie():
    global cookie
    resp = 'cookie received: %s<br>\r\n' % request.cookies.get('yum')
    resp += 'previous server cookie: %s<br>\r\n' % cookie
    cookie = str(randint(0, 10000))
    resp += 'new cookie set: %s' % cookie
    resp = make_response(resp)
    resp.set_cookie('yum', cookie)
    return resp


if __name__ == '__main__':
    number = randint(0, 10000)
    cookie = str(randint(0, 10000))
    app.debug = True
    app.run()

```

Which of the following CWE vulnerability categories are present in this code? Multiple options may be correct.

  A) CWE-295: Improper Certificate Validation
  B) CWE-94: Improper Control of Generation of Code ('Code Injection')
  C) CWE-326: Inadequate Encryption Strength
  D) CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
  E) CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
  F) CWE-730: OWASP Top Ten 2004 Category A9 - Denial of Service
Answer: D