web application audit ideas needed

[learn lids <learnlids () yahoo com>]

hi everyone

i am a newbie to this filed of webappsec. for a
research project, i am looking at source audit of web
app. it has activex components etc. 

what all sould be covered vis-a-vis security
prespective? could someone maybe throw some ideas for
apps which I can cover for my practice - maybe a good
meduim sized open source app ?

thanks


        
                
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - You care about security. So do we. 
http://promotions.yahoo.com/new_mail