The Web Application Security Consortium (WASC) is pleased to announce the WASC Web Application Security Statistics Project 2007. This initiative is a collaborative industry wide effort to pool together sanitized website vulnerability data and to gain a better understanding about the web application vulnerability landscape. The overall statistics includes analysis results of 32,717 sites and 69,476 vulnerabilities of different degrees of severity.
You can download it from the following link: https://packetstormsecurity.com/files/download/69747/wasc_wass_2007.pdf
Source: https://packetstormsecurity.com/files/69747/wasc_wass_2007.pdf.html