Статья Top 10 Web 2.0 Attack Vectors :
http://www.net-security.org/article.php?id=949
(Очень рекомендуется к прочтению тем кто использует AJAX)

1. Cross-site scripting in AJAX
2. XML/XML schema poisoning
3. Malicious AJAX code execution
4. RSS / Atom injection
5. WSDL scanning and enumeration
6. Client side validation in AJAX routines
7. Web services routing issues (WS-Routing)
8. Parameter manipulation with SOAP
9. XPATH injection in SOAP message
10. RIA thick client binary manipulation... << RSDN@Home 1.1.4 stable SR1 rev. 568>>