Web applications wide open to hackers