Caution

95% of Web Apps Have Vulnerabilities

Cross-site scripting(80%)
SQL injection(62%)
Parameter tampering(60%)
Cookie poisoning(37%)
Database server(33%)
Web server(23%)
Buffer overflow(19%)

Oh.. can u believe this..
for more in detail visit my pal's blog websecurities.