From looks of it many of the vulnerabilies could have have actually been found at the time of coding if some security best practices were followed