According to Symantec 's Internet Security Threat Report covering 2008 , the percentage of documented malicious code samples that exploit vulnerabilities declined substantially last year , from 13 percent in 2007 to 3 percent in 2008 .