The list continues with SMS spoofing, purchases w/o credentials, cross-site scripting attack and *a lot* more arbitrary code execution..