The Web is a dangerous place and the recent DDOS attack on Facebook and Twitter highlighted how cyber crime syndicate now target SNS sites.
Check out Open Web Application Security Project (OWASP) Top 10 Web application vulnerabilities for 2007 http://www.owasp.org/index.php/Top_10_2007