What is the common cause of buffer over flows, cross-site scripting, SQL injection and format string attacks?
Unvalidated input
Lack of authentication
Improper error handing
Insecure configuration management