java.lang.SecurityManager
While not necessarily representing a security hole, such classes should be thoroughly and professionally inspected for possible security issues.
Example:
class CustomSecurityManager extends SecurityManager { }