Windows XP and Firefox browser amass worst vulnerability record over past 25 years