S. Christey, CWE/SANS Top 25 Most Dangerous Programming Errors, 2009.

J. Williams and D. Wichers, Top 10, pp.10-2007, 2007.