EY Interview Question

What are the most common attacks in web applications?