<p>I'm pretty green still when it comes to web programming, I've spent most of my time on client applications.  So I'm curious about the common exploits I should fear/test for in my site.</p>

These three are the most important:
Cross Site Request Forgery
Cross Site Scripting
SQL injection