By use of action script to read the users cookie and transmit it to another url.
And doesnt it also allow interaction with the filesystem? if so the server could also be compromised.
Im no flash expert but actionscript is very much like javascript, both are bad for forums.