Register globals is a major security flaw an example:
if you had some code that had a variable where admin was either 0 or 1 depending on the users status, with register globals on, if the person going to your site added ?admin=1 at the end, they auto get admin access.. You can read more at...