Broken Authentication and Session Management
Cross-Site Scripting (XSS) e Cross-Site Request Forgery (CSRF)