The biggest issues are that it can take over the server. For instance, we have a VPS with Minecraft Server on it. If something goes wrong there's a possibility the hacker could take over the entire server...all VPS' etc.!!!
The person who has the VPS has been notified.