SANS Top 20 Security Risks 2007

Follow the link for the list:
SANS Top-20 Security Risks 2007

Also, read Bruce Schneier and others' comments on it:
http://www.schneier.com/blog/archives/2007/12/sans_top_20.html