What C standard library functions are used inappropriately/in ways that may cause/lead to security problems/code defects/inefficiencies ?
I’m gonna go with the obvious :
char *gets(char *s);
With its remarkable particularity that it’s simply impossible to use it appropriately.