This is the first in a series of deep dives into the most prominent and pervasive vulnerabilities, starting with cross-site scripting.