I've done security remediation for the U.S. Govt. About the same vulns you would expect on 2003 PHP apps that haven't been updated since (OS or otherwise). Cong

I've done security remediation for the U.S. Govt. About the same vulns you would expect on 2003 PHP apps that haven't been updated since (OS or otherwise). Congress doesn't budget for server/app maintenance, simple as that.