Second on the top 25 software flaw list is OS command injection flaw, third is classic buffer overflow, and fourth is cross-site scripting. In its annual list of software flaws, Mitre and the SANS ...