add CVE for session fixation - CVE-2011-4718