Buffer Overrun, Format String Problems, Integer Overflow, and Software Security Fundamentals , SQL Injection, Command Injection, Failure to Handle Errors, and Security Touch points, Cross Site Scripting, Magic URLs, Weak Passwords, Failing to Protect Data, Weak random numbers, improper use of cryptography, Information Leakage, ace Conditions, Poor Usability, Not Updating Easily, Executing with too much privilege , Failing to protect network traffic, improper use of PKI, trusting network name resolution.