It is not surprising then that some are calling for developers to pay closer attention to Flash security. IBM, for example, just enhanced its AppScan tool to add the ability to test and scan Flash applications.

At the ShmooCon 2009 conference in Washington, D.C., Hewlett-Packard’s Prajakta Jagdale used her presentation Feb. 7 to focus on common vulnerabilities in Flash applications. In her research, Jagdale found that many developers leave, for example, uninitialized variables that leave applications open to cross-site scripting.

But as she noted in an interview prior to the conference, many of the common security holes—from input validation to having user name passwords hard-coded inside of the client code—are not exclusive to Flash.

Read the rest of this article on eWEEK.com.