Tip a friend feature allows anybody to send large amount of spam to different addresses. This should be prevented by captcha or other method. Of course it's easy to build custom form for this usage but this kinda make this default feature completely unusable.