Exactly what kind of an attack could a rogue exit node orchestrate?

And why is the android wallet more vulnerable than the satoshi client?