Security bugs, or never-ending stories

As pooh and many other Czech sites reported, OWASP has published a report on the ten most serious security flaws in web applications. I'll just add that reading the recommendations isn't enough. You have to start following them and putting them into practice. Sadly, even government sites can't manage this, but that's their own embarrassment.