The more complicated a program is, the less secure it generally is. Flaws may then be exploited by network-based attacks. Web pages often include forms. As with e-mail, data sent from a Web browser to a Web server may pass through many interconnecting computers and networks before reaching its final destination. Users should be aware that the privacy of personal or valuable information sent using a Web page entry cannot be assured.
Web servers are vulnerable to threats, especially to malicious threats.
Web servers can be attacked directly, or they can be used as jumping off points to attack an organization's internal networks. Organizations should examine the underlying operating system of their Web server, the Web server software, server scripts and other software for vulnerabilities. Many organizations now support an external Web site describing their products and services. For security reasons, these servers are usually posted outside the organization's firewall. The offerings of Web sites range from simple notices to carefully developed and designed marketing vehicles.