Comment by JoshTriplett

"moderate" makes sense here; those are issues that needed fixing, but they wouldn't give someone privileged access they shouldn't have, and they occur in non-default configurations.