Java Open Review Project

Here's an interesting site sponsored by Fortify Software about Java vulnerabilities. The project is called the Java Open Review Project.

Fortify makes a source code analysis tool.