What are the security risks I should guard against when running user-supplied Java code?
<p>Is there a comprehensive list of the security issues with running user-supplied Java code on a server? I'm already</p>

<ul>
<li>using timeouts of 10 seconds</li>
<li>running code in a separate process with limited available memory</li>
<li>using SecurityMangager to prevent File and Network IO</li>
<li>running code under an account with extremely limited filesystem permissions</li>
</ul>

<p>I'm running this on a FreeBSD server if that matters.</p>
