There aren't any major ones, but there is stuff that needs to be cleaned up and fixed (like the database issue). The protocol is PoW, so security models similar to that of Bitcoin.
Plus, sending coins to an exchange with payment_id potentially breaks anonymity in one way.
Also, it's very annoying that I must generate a new wallet to create a new address.
Are you going to fix this miss?
So what? It's easy as hell to pump a coin if just 5-10-20 people have 99% of total supply.