Seen this? 25 Dangerous Programming Errors
It's from SANS, a training provider. I've removed the words "Top" and "Most" to reduce unnecessary hyperbole.
It's culled from this: MITRE's Common Weakness Enumeration. Interesting stuff.
I don't have an opinion on it, yet - but I'd be interested to know who, in the software testing community, does. Answers on a postcard, please. Or a comment here, if it's easier.