Paypal suffers from an arbitrary account deletion vulnerability that leverages unvalidated email account additions.