Been going through the AIM for acrobat ( _83709.html) documents and realised that JS appears to be the tip of a rapidly forming iceberg.
bAllowPasswordSaving, By default, password caching is turned on. I have no idea where it stores the password file, it is a SHA-1 hash by default.
ADBC, (Acrobat Database Connectivity) is a Javascript object inside of Acrobat that allows you to connect to Windows ODBC (Open Database Connectivity) data sources. Enabled by default in version 7, even if JScript is turned off.
Attachments, not locked down, run executables?
the ability for acrobat to open a file or url or even a menu item embedded as an embedded link in a document, whilst you do get a warning, I cannot see how you can turn this off.
Thats even before looking at the other issues from a corporate point of view, like acrobat.com and the collaboration menu.