Box Interview Question

What kind of security vulnerabilities could Javascript pose?