All of the above is pretty sad. I simply don't get it. It's year 1997 now. Internet has been around for many years. One would think that it's been enough time for everyone to understand that it's a pretty hostile place.
Web security is the hottest topic of the day.
Still, in SGI land everything's quiet. Same buggy CGI scripts were shipped couple years ago, and they are still there on newest O2s. It's a company policy, to put security issues below practically everything else. It's really something unique. Buffer overflows are common.