The top 3 security threats are injections, authentication flaws, and cross-site scripting (XSS).