In Limesurvey prior to 3.17.14, the entire database is exposed through browser caching.
limesurvey limesurvey