Web Application Security statistics for year 2007

Web Application Security Consortium ( http://www.webappsec.org/ ) released a survey for Web Application Security vulnerabilities for the year 2007. XSS still dominates the arena. Well detailed, worth a read : http://www.webappsec.org/projects/statistics/