wow,this must be good isn’t it? this listed by Jeremiah Grossman,Founder & CTO WhiteHat Security on a persentation at Dubai 17thMay2008, i wont list it here, because it a huge list, and picture below is show
the Likelihood that a website has a vulnerability, by Class :

and this little list from the latest web vulnerability

The Attack of the TINY URLs
CSS History Stealing Acts As Cookie
Backdooring MP3 Files
Detecting FireFox Extensions
Backdooring QuickTime Movies
Stealing User Information Via Automatic Form Filling
CSS history hacking with evil marketing
Circumventing DNS Pinning for XSS
I know where you’ve been
Netflix.com XSRF vuln
Stealing Search Engine Queries with JavaScript
Browser Port Scanning without JavaScript
Hacking RSS Feeds
Widespread XSS for Google Search Appliance
MX Injection : Capturing and Exploiting Hidden Mail Servers Bypassing Filters With Encoding
Blind web server fingerprinting
Variable Width Encoding
JavaScript Port Scanning
Network Scanning with HTTP without JavaScript
CSRF with MS Word
AT&T Hack Highlights Web Site Vulnerabilities
Backdooring PDF Files
How to get linked from Slashdot
Exponential XSS Attacks
F5 and Acunetix XSS disclosure
Malformed URL in Image Tag Fingerprints Internet Explorer
Anti-DNS Pinning and Circumventing Anti-Anti DNS pinning
JavaScript Portscanning and bypassing HTTP Auth
Google plugs phishing hole
Bruteforcing HTTP Auth in Firefox with JavaScript

and here is the full list latest website vulnerability