I found this - can anyone provide me examples of how these issues are exploited?
Flash is jailed by the some-origin policy and can only act upon a site that loads the flash applet with scripting access enabled.
However, flash can become a vector for XSS. The demo above lists various XSS vectors. So for example in the extremely unlikely condition where you are loading a flash applet where the attacker can control the
XSS is extremely common and there are many ways that this attack can manifest. Flash based XSS is one way, and its also extremely uncommon.