The paper Automated Detection of Client-State Manipulation Vulnerabilities is accepted at ICSE'12