I would add to the list finding a big security hole or other risk and fixing it. I joined an e-commerce team at a major systems integrator and discovered they

I would add to the list finding a big security hole or other risk and fixing it. I joined an e-commerce team at a major systems integrator and discovered they had left the default password in place for the administrative interface of their flagship implementation. It was actually possible to delete the entire product database using the website. I changed the password immediately, of course.