Thinking about the curl table, I wonder if there are interesting exploits around the URL parsing shenanagins. Probably depends on what systems people build around it