I read a stat today that states that 85% of all software security exploits are attributed to just ten known vulnerabilities. Pretty crazy, and makes you wonder why developers don't just learn to fix those vulnerabilities and significantly improve their company's application security.