added possible vulnerability comments...