Apple has a nice documented Technical Q&A page for implementing scripting targets for Mail.app. However, even though scripting targets also work for iTunes, there isn't a comprehensive list of available scripting targets.
Does anybody know how to find this list? The WWDC 2012 session on Secure Automation mentions a few, but it isn't comprehensive.