Answer:
The risk is a buffer overflow.
Explanation:
Whatever the user passes as a command line argument, will be copied into the buffer. If the user passes more than 499 characters, the end of the buffer will be overwritten.
To solve it, compare the string length of argv[1] to 500 before copying, or even better, start using the new strcpy_s( ) function.