Summit 2011 Working Sessions/OWASP Common vulnerability list