In reply to Snicco.

Or how about some of the SQLi vulnerabilities directly in AIOWS?

You’re referring to what precisely there? On the list you’ve linked, the last one was in April 2015 (which is also under previous ownership).