Buffer overflows, weak authentication algorithm, weak pseudo-random number generators, directory traversals, etc.