Occasional visitors to my sites send one or more cookies that were never set by my hosts. Sometimes it's an obvious bot. Sometimes it's even an attempt to exploit. But occasionally it looks like a reasonably legit visit, except for the cookies which are mundane like the date or an IP address.
Are there legitimate reasons why a user agent would deliver cookies to a host which never set them? Do any of the popular human-powered browsers ever do this?