There are CSRF vulns everywhere. Infact, It was a CSRF that got me into the Google Hall of Fame!