Sentence:  The major problem here is the approach of using the domain object directly as the parameter for the action method that allows a user to <WSD>overpost</WSD>. 
Meaning of the word marked with <WSD> tags:  To breach security by overwriting data that is not intended for user input.