A top 25 list by Common Weakness Enumeration. XSS takes the top spot, followed by SQL injection and “classic” buffer overflow.