Percent of Web Application Vulnerabilities Are in the Source Code
ptsecurity.com