Denial of service: In order to crash the server you have to create more than 107 connections with the HTTP service very fast.
Non password admin panel access: Any user can access http://localhost/admin in any server configuration. Any user can access http://localhost/admin/ServerProperties.html where you can change server properties and make ftp accounts with path in any part of hard disk, what mean that - remote attacker may veiw any file on hard drive.
