What’s the consensus on the state of web app security, anyway?

… to F5 and Cyentia’s report they saw: “at least ‘so-so’ agreement among them that [SQL] injection attacks and cross-site scripting rank highest.”.