Over 30 technical organizations such as Microsoft, Symantec and the National Security Agency have collaborated to generate a list of the 25 most dangerous computer programming errors. The study was funded by the Cyber Security Division of Homeland Security.
The detailed report lists errors and corresponding solutions in 3 separate categories. First category is "Insecure interaction between components". Errors here include failure to maintain web page structure and cross-site scripting that creates vulnerability to hackers.
The second category is "Risky Resource Management". The 9 errors here include external control of critical state data which allows hackers to play with your system.
The "Porous Defences" category includes 7 errors related to security checks and authorization.
The objective of the report is to provide a checklist for the purchasers of software to obtain safe software and programmers to have a checklist of security concerns to incorporate into their work.