Bug 951825 - Use sum() instead of count() to figure exploitability counts

r? @selenamarie