Error Handling problems Command injection SQL injection Unvalidated parameters Cross Site Scripting Insecure cryptography