Moved the DNS vulnerability into the information disclosure category.