Public CERT/CC bug reports.

Team Bounty Title
CERT/CC - manipulate the Practical HTTP Host header