Application functions related to authentication and session management are often not implemented correctly, allowing attackers to $$ Select the $3$ correct answers.

a$.$ Compromise passwords

b$.$ Compromise keys

c$.$ Compromise session tokens

d$.$ Execute scripts in the victim's browser