CWE/SANS Top 25 Most Dangerous Programming Errors

CWE/SANS published a recent report on the most dangerous programming errors, that developers should be aware of. This report is very interesting, and worth reading.
Developers really lack knowledge about security.
In addition, I think that pointing out the most dangerous errors is a good step forward toward  informing the SE community about security issues.

About this subject, i put a comment on veracode security blog.
I argued about the methods security companies are using, which include only two diffrent solution; which are: automated tools for detecting flaws AND security expert manual code audit. Well, that will work to a certain degree but i thing that is not good enough.
I will not go further because my comment is available in their blog entry.