NGSSoftware has a database of 175 unfixed vulnerabilities in software products from Oracle, IBM, HP, Microsoft, Openbase, Real, Sybase, Ingres, Veritas, Computer Associates and Sun. The security consultancy is working with the UK's National Infrastructure Security Co-ordination Centre (NISCC) on the issues.