Allow 1.2.3 versions as well as 1.2.3.4

Also make refresh and minor autoversions have a blank cve instead of 0.

Also fixes bugs in the number checking, in that before we'd fail on:

old=1.2.3.4, new=2.1.1.1