I think that I have found a couple of logic bugs that could prevent proper vulnerability discovery, some DoS, but nothing remotely exploitable to pop the server (otherwise I won't be publishing this articles ;)).