I was just reading this report from Cenzic - it makes for interesting reading! For accuracy, I'll point out that the report states that web browser vulnerabilities comprised roughly 5% of the total application vulnerabilities - all the same, it's nice