a. These could be in the UI and middle level tiers
b. There are common patterns for memory leak, e.g. proxy to WCF [code]
e.g RIA service [code]
e.g. Load += (9 out of 10 people will forget to remove their statement)
Google: Common Memory Leak [bad code]
[good code]