A large number of STARTTLS vulnerabilities were disclosed by Hanno et al: https://nostarttls.secvuln.info/.