Anagram vulnerabilities