with time. While format string vulnerabilities are well-known in 2007, they were quite
rare in 2001, so even if they were found in five in 2001, they would not have qualified as
“unforgivable” at the time. Today, of course, is a different story.
For this paper, we will define an Unforgivable Vulnerability as one that matches Criteria