Patch 2

@tomneedham Can you please push to live before 2015? :-) 

Should include everyone that reported at least one eligible vulnerability in 2014, sorted by impact and number of vulns