I think it's a no-brainer to predict that more and more bugs and vulnerabilities are going to come to light in Mozilla, as it gains in popularity and becomes a juicier target. Open source is a two-edged sword: Of course, as proponents say, you get lots of eyeballs looking for vulnerabilities to close; but you also get lots of eyeballs looking for vulnerabilities to exploit. It's an arms race.

The scary thing about many of the vulnerabilities listed is that they go behind the layer of HTML and JavaScript and dig into the underlying browser code. Mozilla exposes its entire C++ class hierarchy to script, resulting in a fantastically rich environment for hacking. As always, their intentions were good: To make the Mozilla/Gecko engine open and reusable in applications like new browsers and HTML interfaces for standalone apps. But I fear it may make it impossible to ever make the browser completely secure.