Håstad's Broadcast Attack

RSA with a small exponent is fast to compute but it has a serious weakness.