Java JRE 5 Version 3.
I have Sun Java set to automatic update. It didn't.
I did a manual check- it said there was nothing new. I'd been to the site and knew version 3 was available, and that I had version 2.
I downloaded and installed version 3. It left version 2 installed on my computer. (And a Java applet can choose to run under an earlier version if installed- thus a malicious applet can exploit a vulnerability in a previous version, if it has not been uninstalled.)
I uninstalled version 2 through Add/Remove programs.
I think Sun JRE is now up-to-date.
This happened before when there was a security vulnerability in the Sun Java sandbox: i.e. no automatic updates, notification, manual install left old version behind.)
Old Bill Gates gets a lot of flak over security, but at least MS updates are smooth.
Rant,rant,snarl,rant, rant, rave, snarl, rant...ad nauseam.