Vulnerabilities in the popular What to Expect app include one that allows a full account take over, and another that exposes that email address of forum admins.