Callisto 821+R3 suffers from multiple cross site request forgery vulnerabilities.