[31st Jan 2007] - Google Mail - Gmail.
Multiple problems in server-side session handling

click here for more details

[31st Jan 2007] - Orkut.com.
Multiple problems in server-side session handling

click here for more details

[19th Jan 2006] - Microsoft ASP.NET Web Services.
Unhandled exception leads to LDAP injection disclosure.

click here for more details

[18th May 2005] - Microsoft ASP.NET Web Services.
Unhandled exception leads to file system disclosure and SQL injection.

click here for more details