Three vulnerabilities every web application developer should know about