It's the same old same old every year

Almost 60% of the loopholes listed this year were in the 2003 Top 20 list. Mr Paller said this was because only half of all organisations bother to patch their systems.
http://news.bbc.co.uk/1/hi/technology/3727692.stm

http://www.sans.org/top20/