Unvalidated Parameters Cross-Site Scripting Flaws Command Injection Flaws Error Handling Problems Insecure Use of Cryptography