RED: a top 10 for that year
GREEN: during that year, the vulnerability's rank was at least 5
points BELOW the average rank for that vulnerability
YELLOW: during that year, the vulnerability's rank was at least 5