Which reminds me -- this is only one of the issues that appeared om the "SANS Top 20 Internet Vulnerabilities":
http://www.sans.org/top20/
- ferg