A recent survey of the top vulnerabilities is discussed in SANS Top-20 Internet Security Attack Targets. For more information see SANS Institute The System Admin, Networking, and Security organization. The SANS Top-20 is a consensus list of vulnerabilities that require immediate remediation.