Vulnerability #3: Trusting Cookies.