Story: Browser flaws biggest software security risk
http://www.darkreading.com/document.asp?doc_id=104313
There ARE many XSS exploits on high profile sites as this article shows. It's just that us good guys are disclosing them. The problem isn't that there are many of them, but that they can be found anywhere regardless of how much network security a server has.
Full Talkback thread

