I think most vulnerabilities you'll see now are not port attacks but browser ones. For example, there was a jpg one a ways back that has probably been in there

I think most vulnerabilities you'll see now are not port attacks but browser ones. For example, there was a jpg one a ways back that has probably been in there forever. So any app you run that links with libjpg and opens that image will be vulnerable. If the OS vendor isn't patching those (win7) any more, down you go.