BleepingComputer.com: Popular Web Sites Highly Vulnerable To Attack

Eight out of ten Web sites contain common flaws that can allow attackers to steal customer data, create phishing exploits, or craft a variety of other attacks...Thirty percent of scanned sites contain an urgent vulnerability, such as one that allows direct access to a company database with customer information...Two out of three scanned sites have one or more cross-site scripting (XSS) flaws, which take advantage of problems with sites' programming and are increasingly used in phishing attacks...