Fun website, but most of these really don't cross the line from "aggressive marketing" into "dark pattern." If the site reps are listening, why not let me browse the worst offenders first?
tl;dr: Send an email message with a carefully crafted file attachment. Triggers a parsing bug (presumably a buffer overflow). Attacker could cause several bad things, including adding a root user. Yikes.