Let's see if they've gotten around to look at some of these issues, as well. I'm obviously very biased here and think all vulnerabilities I've found are important and should be very promptly fixed, but the anniversaries of some these bugs are already around the corner.
|FileSystemView allows read access to file system structure||May 11th, 2008||Fixed||Dec 2nd, 2008||204|
|Read access to System Properties||Aug 18th, 2008||Not Fixed||N/A||342*|
|Calendar.readObject allows elevation of privileges||Aug 1st, 2008||Fixed||Dec 2nd, 2008**||122|
|Undisclosed vectors allow elevation of privileges||Oct 19th, 2008||Not Fixed||N/A||280*|
|Undisclosed vectors allow directory listing and file renaming/moving||Oct 26th, 2008||Not Fixed||N/A||273*|
|Generic security architecture problem||Nov 2nd, 2008||Not Fixed||N/A||266*|
|Undisclosed vectors allow folder creation||Oct 20th 2008||Not Fixed||N/A||279*|