diff --git a/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Category.java b/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Category.java
index fc5d96242..063b57420 100644
--- a/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Category.java
+++ b/webgoat/main/project/JavaSource/org/owasp/webgoat/lessons/Category.java
@@ -55,25 +55,25 @@ public class Category implements Comparable
 
 	public final static Category CONCURRENCY = new Category("Concurrency", new Integer(800));
 
-	public final static Category DOS = new Category("Denial of Service", new Integer(900));
+	public final static Category XSS = new Category("Cross-Site Scripting (XSS)", new Integer(900));
 
-	public final static Category ERROR_HANDLING = new Category("Improper Error Handling", new Integer(1000));
+	public final static Category DOS = new Category("Denial of Service", new Integer(1000));
 
-	public final static Category INJECTION = new Category("Injection Flaws", new Integer(1100));
+	public final static Category ERROR_HANDLING = new Category("Improper Error Handling", new Integer(1100));
 
-	public final static Category INSECURE_COMMUNICATION = new Category("Insecure Communication", new Integer(1200));
+	public final static Category INJECTION = new Category("Injection Flaws", new Integer(1200));
+
+	public final static Category INSECURE_COMMUNICATION = new Category("Insecure Communication", new Integer(1300));
 	
-	public final static Category INSECURE_CONFIGURATION = new Category("Insecure Configuration", new Integer(1300));
+	public final static Category INSECURE_CONFIGURATION = new Category("Insecure Configuration", new Integer(1400));
 
-	public final static Category INSECURE_STORAGE = new Category("Insecure Storage", new Integer(1400));
+	public final static Category INSECURE_STORAGE = new Category("Insecure Storage", new Integer(1500));
 
-	public final static Category PARAMETER_TAMPERING = new Category("Parameter Tampering", new Integer(1500));
+	public final static Category PARAMETER_TAMPERING = new Category("Parameter Tampering", new Integer(1600));
 
-	public final static Category SESSION_MANAGEMENT = new Category("Session Management Flaws", new Integer(1600));
+	public final static Category SESSION_MANAGEMENT = new Category("Session Management Flaws", new Integer(1700));
 
-	public final static Category WEB_SERVICES = new Category("Web Services", new Integer(1700));
-
-	public final static Category XSS = new Category("Cross-Site Scripting (XSS)", new Integer(1800));
+	public final static Category WEB_SERVICES = new Category("Web Services", new Integer(1800));
 
 	public final static Category ADMIN_FUNCTIONS = new Category("Admin Functions", new Integer(1900));