This question got me thinking - I know the Velocity website is badly built, but surely it would still validate form choices server-side (if modified by a user in the browser) when searching "My Activities"?
Turns out it doesn't (I guess I really shouldn't have been surprised) - you can change the 'value' of the '2014' option in the form to '2010' using your web browser's 'inspector' tool, and press search, and the server processes it without checking it's a valid option - and will output all your history :/.
I won't give detailed instructions, as it's a (small/minor) abuse of their website, but I'm sure anyone determined can work out how to modify form values with a bit of googling.