Today I found myself reading the Security Issue History from the ViewVC project. I thought it was instructive to see what actual (known) vulnerabilities looked like for a small software project over a twenty year period.